Ask Your Question

WJT's profile - activity

2023-01-30 15:19:35 +0000 received badge  Famous Question (source)
2020-07-02 14:04:42 +0000 received badge  Notable Question (source)
2020-02-19 07:00:01 +0000 received badge  Popular Question (source)
2018-05-17 06:42:06 +0000 marked best answer Wireshark LUA use field from previous/lower dissector

I have written an custom LUA dissector for ERSPAN. But to apply different header based on the ERSPAN Type indicated by gre.proto field in GRE header, I would like to use the value of gre.proto field in my dissector.

I have already searched and saw methods using post dissector but I am doing something wrong and it is not working for me.

So I would like to have something like this within my custom dissector:

if greprotocolversion == 0x22eb then

...
...

elseif gregreprotocolversion == 0x88be then

..
..

end

What would be the most simple method to accomplish this? Thank you.

2018-05-17 06:42:06 +0000 received badge  Scholar (source)
2018-05-17 06:41:41 +0000 commented answer Wireshark LUA use field from previous/lower dissector

Hi Thanks for the help. Indeed I mean to use the GRE proto field. I used the code in my dissector and it is working.

2018-05-16 08:17:08 +0000 asked a question Wireshark LUA use field from previous/lower dissector

Wireshark LUA use field from previous/lower dissector I have written an custom LUA dissector for ERSPAN. But to apply di