Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

asked 2025-02-06 08:16:13 +0000

tfx78 gravatar image

Modify lua dissector tree

Hi, I'm looking for a way to modify/extend the dissection tree of another dissector. Up to now, I've used a post dissector but I can only add a new tree at the same level as the other dissector. My wish is to be able either to modify the decoded data or to add a new field at the right level. For example : Now displayed in Wireshark: Dissector tree |_leaf_1 | |_leaf_1.1 | |_leaf_1.2 |_leaf 2 |_leaf 2.1 |_leaf 2.2 Post dissector tree |_leaf A |_leaf B

  • what I would like: Dissector tree |_leaf_1 | |_leaf_1.1 | |_leaf_1.2 | |_leaf A |_leaf 2 |_leaf 2.1 |_leaf 2.2 |_leaf B

I've tried to use the chained dissector, but as far as I know, I can only do the same thing (2 dissector trees). Is there a way to obtain the desired presentation?

Modify lua dissector tree

Hi, I'm looking for a way to modify/extend the dissection tree of another dissector. Up to now, I've used a post dissector but I can only add a new tree at the same level as the other dissector. My wish is to be able either to modify the decoded displayed data or to add a new field at the right correct level. For example : Now displayed in Wireshark: Wireshark: (leafs A and B are separated from their parent leaf)

Dissector tree
|_leaf_1
|   |_leaf_1.1
|   |_leaf_1.2
|_leaf 2
 |    |_leaf 2.1
 |    |_leaf 2.2
Post dissector tree
|_leaf A
|_leaf B1.3
|_leaf 2.3

what I would like:

  • what I would like: 
    Dissector tree
|_leaf_1
|   |_leaf_1.1
|   |_leaf_1.2
|   |_leaf A
1.3 (from my dissector)
|_leaf 2
 |_leaf 2.1
 |_leaf 2.2
|_leaf B
 |_leaf 2.3 (from my dissector)

I've tried to use the chained dissector, but as far as I know, I can only do the same thing (2 dissector trees). Is there a way to obtain the desired presentation?