Hello everyone ! I'm trying to create a Lua dissector for a custom BLE protocol. Unfortunately I have to manage the reassembly of certain frames and in particular create a new TVB object for this, which creates a new page with the label (unnamed) in the packet bytes pane. Is it possible to change this name in Lua?
Thanks in advance ;)
Can you update the question with the output of wireshark -v or Help->About Wireshark:Wireshark.
Create new data (tvb) with ByteArray and Struct on the Wiki is a pointer to I made a Lua script to test different float and double values without a capture file. which creates tvb with unique names which are displayed on the tab labels in the packet bytes.
result of wireshark -v :
Wireshark 3.6.2 (Git v3.6.2 packaged as 3.6.2-2)
Copyright 1998-2022 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) using GCC 11.2.0, with Qt 5.15.2, with libpcap, with POSIX
capabilities (Linux), with libnl 3, with GLib 2.71.2, with zlib 1.2.11, with Lua
5.2.4, with GnuTLS 3.7.3 and PKCS #11 support, with Gcrypt 1.9.4, with MIT
Kerberos, with MaxMind DB resolver, with nghttp2 1.43.0, with brotli, with LZ4,
with Zstandard, with Snappy, with libxml2 2.9.12, with libsmi 0.4.8, with
QtMultimedia, without automatic ...creates tvb with unique names which are displayed on the tab labels in the packet bytes.
Note that tvbs don't themselves have names; not every tvb corresponds to a separate tab - a tvb might just be a subset of another tvb (and most of them are just subsets of other tvbs), and that's not something that deserves a tab of its own.
Reassembled data, decrypted data, decompressed data, etc., where the data is constructed out of more than one tvb, or is the result of processing the data in another tvb, get tabs of their own; there's a separate mechanism to contract a "data source" and associate the tvb with it. bytearray:tvb() constructs a "raw data" tvb from an array of bytes, and constructs a "data source" with the specified name and associates the tvb with it.
Asked: 2023-10-05 08:39:15 +0000
Seen: 112 times
Last updated: Oct 05 '23
The various views of packet bytes in the packet view pane are called "tabs" in Wireshark; presumably that's what you mean by "page(s)".
Which Lua call are you using to create a new TVB object?
bytearray:tvb()?tvbrange:tvb()?