Ask Your Question

Adrian's profile - activity

2020-10-14 16:18:39 +0000 marked best answer “Apply as Column” for field in custom protocol in Wireshark

I've written a dissector in Lua for my custom protocol:

local myproto = Proto("MyProto", "My Custom Protocol")
myproto.fields.msg_counter = ProtoField.uint8("myproto.msg_counter", "Message counter", base.DEC)

function myproto.dissector(tvbuf, pktinfo, root)
  pktinfo.cols.protocol = myproto.name
  if root.visible then
    root:add_le(myproto.fields.msg_counter, tvbuf(10, 1))
  end
end

local udp_port = DissectorTable.get("udp.port")
udp_port:add(5432, myproto)

That works, the "Message counter" field and its value are correctly displayed in the tree area. But when I right click the field and choose "Apply as Column", the column is added but remains empty:

Wireshark screenshot

How can I fix this, so that the field values are displayed in the column view? I'm using Wireshark 3.2.3. Thanks in advance!

2020-10-14 16:18:39 +0000 received badge  Scholar (source)
2020-10-12 18:12:24 +0000 commented answer “Apply as Column” for field in custom protocol in Wireshark

Thanks, that worked! But now packet parsing is painfully slow, it takes several minutes per 100k captured packets (and m

2020-10-12 10:45:28 +0000 received badge  Editor (source)
2020-10-12 10:45:28 +0000 edited question “Apply as Column” for field in custom protocol in Wireshark

“Apply as Column” for field in custom protocol in Wireshark I've written a dissector in Lua for my custom protocol: loc

2020-10-12 10:44:17 +0000 asked a question “Apply as Column” for field in custom protocol in Wireshark

“Apply as Column” for field in custom protocol in Wireshark I've written a dissector in Lua for my custom protocol: loc