Find grpc call name in Lua dissector

asked 2018-06-21 14:54:07 +0000

sigsegv
1 ●1

I am writing a Lua dissector for a specific grpc schema I use.

To see requests/responses for a given call, I register my proto in the grpc dissection table like so:

DissectorTable.get("grpc_message_type"):add("application/grpc,/some.App/Unlock,request", proto) DissectorTable.get("grpc_message_type"):add("application/grpc,/some.App/Unlock,response", proto) DissectorTable.get("grpc_message_type"):add("application/grpc,/some.App/OtherFunc,request", proto) ...

Here /some.App/Unlock is the name of the call, request/response indicate the direction of the message.

In the dissector function, how do I find out which call I am dissecting for?

The grpc dissector does not seem to offer this information in a field.

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2020-03-14 13:34:47 +0000

Skison
1 ●1

If your dissector is written in C, you can get this information from 'data' parameter of your "int dissect_xxx(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data)" function. But unfortunately passing 'data' parameter to subdissector written in Lua is not supported by current wireshark.

But if your gRPC operation is defined in 'xxx.proto' file and the wire data is encoded in protobuf format, you need not write dissector by yourself. Because new version of wireshark (since 3.2.0) support configuration '*.proto' feature (https://www.wireshark.org/docs/relnot...).

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-06-21 14:54:07 +0000

Seen: 356 times

Last updated: Mar 14 '20

Find grpc call name in Lua dissector edit

1 Answer