sezb51's profile - activity

Hello, I just realize that I can do "s8hr_tree:add (f.imsi, imsi)" and that allows to fully search for s8hr.imsi == "xx

Hello, I just realize that I can do "s8hr_tree:add (f.imsi, imsi)" and that allows to fully search for s8hr.imsi == "xx

LUA: ProtoField as tag packet ? Hello, in my lua dissector most of the packet types do have IMSI information extracted

Hello, I just realized that it is simple as adding the Field.new just after the Proto(...) definition: version = "v1.0

LUA & search in the nested packet... Hello, in my LUA protocol dissector there could be a specific packet type that

LUA & search in the nested packet... Hello, in my LUA protocol dissector there could be a specific packet type that

LUA & search in the nested packet... Hello, in my LUA protocol dissector there could be a specific packet type that

incident reported: https://gitlab.com/wireshark/wireshark/-/issues/17616

false TCP retransmission Hello, sometime during initial TCP three way-handshake we receive a SYN/ACK with a wrong "ackn

false TCP retransmission Hello, sometime during initial TCP three way-handshake we receive a SYN/ACK with a wrong "ackn

Fixed the issue... I had to wrap the below ti.text into a tostring() So the NSTIme was not part of the problem. functi

Fixed the issue... I had to wrap the below ti.text into a tostring() So the NSTIme was not part of the problem. functio

Fixed the issue... I had to wrap the below ti.text into a tostring() So the NSTIme was not parte of the problem. functi

LUA: pinfo affected by NSTime ? Hello, I finally narrow down the issue I'm facing with the pinfo... my LUA protocol di

LUA: pinfo altered by NSTime Hello, I rewrite my request since I've finally narrow down the issue... my protocol has a

LUA: pinfo vs NSTime.new Hello, my protocol has a common header followed by multiple TLV options. The LUA script does

LUA and pinfo scope Hello, my protocol has a common header followed by multiple TLV options. The LUA script does itera

LUA and pinfo scope Hello, my protocol has a common header followed by multiple TLV options. The LUA script does itera

For some reason wireshark was mistakenly identifying port 9001 traffic as retransmission without showing the original pa

LUA and retransmission packets Hello, my dissector is registered to decode a bunch of ports: tcp_table = DissectorTabl

Hello,

is it possible for LUA dissector to convert 8x bytes to its decimal/string equivalence ?

local input="00007048860ddf75"
local output = tostring(tonumber(input,16))

expected: 123456789012341
but got: 1.2345678901234e+14

I understand this is normally overcome with some bignum library (ie: bc.dll) but not sure it can work within dissector sandbox.

Any idea ?

Thx, A.

Works like a charm! local input="00007048860ddf75" local output = Int64.fromhex(input) it does produces now: 123456789

LUA and bignum Hello, is it possible for LUA dissector to convert 8x bytes to its decimal/string equivalence ? local i

this looks indeed promising: function userdata2bcd(buffer, offset, len) local bytearr = {} for i = 1, len do nu

Hello,

I need to convert raw hex data: "10 55 55 59 93 09 22 f0" into string: "0f22903995555501" but how to extract high/low nibbles from individual byte ?

function userdata2bcd(buffer, offset, len)
  local bytearr = {}
  for i = 1, len do
    num = userdata2dec(buffer, offset+len-i, 1)
    highByte = ...
    lowByte  = ...
    bytearr[i] = tostring(lowByte) .. tostring(highByte)
  end
  return table.concat(bytearr)
end

Any suggestion is appreciated...

Thx, A!

this looks indeed promising: function userdata2bcd(buffer, offset, len) local bytearr = {} for i = 1, len do nu

LUA: byte to nibbles (low/high) Hello, I need to convert raw hex data: "10 55 55 59 93 09 22 f0" into string: "0f229039

so a table with tlv type as index that contains ProtoField variable ? I need to try up some code :)

You making a good point when you mention possible display filter clash for specific tlv. Currently we have around twent

I agree there is a collapse all menu but that requires user action each time and I do prefer to avoid it if possible. I

I agree there is a collapse all menu but that requires user action each time and I do prefer to avoid it if possible. I

LUA: avoid auto-expand sub-tree Hello, my LUA dissector has a general header followed by an arbitrary number of tlv sec

Hello,

One TLV has length 18... If I try to add to the display tree using:

f.tlvvalue_hex = ProtoField.uint32 ("myproto.tlvvalue_hex", "TLV Value", base.HEX)
tlv_tree:add (f.tlvvalue_hex, buffer(offset, tlvlen))

I get following [(Warning/Malformed) Trying to fetch an unsigned integer with length 18]

How can I just have an hex data sequence displayed instead ? Maybe leveraging on ByteArray ?

Thx!

Final code. I'm happy with that :) function hex2string(buffer, offset, len) local bytearr = {} for i = 1, len do

Hello, here how I solved my issue: [1] collect the arbitrary bytes into array [2] add a tree with custom length (if s