Ask Your Question

Hesse's profile - activity

2019-03-28 14:11:34 +0000 received badge  Popular Question (source)
2018-04-13 04:55:58 +0000 marked best answer calling chained dissector only once and modifying payload for further processing

Hi!

I want to modify payload of a packet before it is processed by its desired dissector. I've written a chained dissector in lua, which modifies the tvb and then calls the next dissector with the modified tvb. The plugins is working correctly. The issue I'm facing is that the dissector is called every time, upon applying filter or opening the io graph, which makes it slower. I can call my dissector only once by checking the value of pinfo.visited. But doing so the payload is not modified and the desired dissector processes the original payload after the first run. I'm looking for a solution so that my dissector is called only onces, which will processes and modifies the payload on the first run. The modified payload should persist so that whenever the packet is visited again(by applying filters or IO graph or Endpoints) the desired dissector would process the modifed payload rather than the original one

2018-04-12 10:57:54 +0000 received badge  Editor (source)
2018-04-12 10:57:54 +0000 edited question calling chained dissector only once and modifying payload for further processing

calling chained dissector only once and modifying payload for further processing Hi! I want to modify payload of a pack

2018-04-12 10:57:04 +0000 asked a question calling chained dissector only once and modifying payload for further processing

calling chained dissector only once and modifying payload for further processing Hi! I want to modify payload of a pack

2018-04-03 17:32:28 +0000 commented answer Unable to decode as srtp packet

okay. So I'll have to bind my dissector before udp?

2018-04-03 11:45:31 +0000 commented answer Unable to decode as srtp packet

I've a stream of srtp packets. And I've defined a dissector, lets say test which simply changes the protocol name in the

2018-04-03 03:53:49 +0000 marked best answer Registering RTP dissector for PCMU Payload Type 0

How can I add my dissector to RTP dissector irrespective of the port so that my dissector is called whenever RTP traffic that contains PCMU (payload type 0).

2018-04-03 03:53:49 +0000 received badge  Scholar (source)
2018-04-03 03:53:19 +0000 commented answer Unable to decode as srtp packet

Tried that, but no luck.

2018-04-02 19:11:33 +0000 asked a question Unable to decode as srtp packet

Unable to decode as srtp packet My dissector is not being called for SRTP packets when I try to call my dissector using

2018-04-02 19:09:33 +0000 asked a question Registering RTP dissector for PCMU Payload Type 0

Registering RTP dissector for PCMU Payload Type 0 How can I add my dissector to RTP dissector irrespective of the port

2018-03-27 20:13:58 +0000 asked a question undefined symbol error while running wireshark after building plugin

undefined symbol error while running wireshark after building plugin Hi! I've just started developing plugins in c and I