Ask Your Question

qutefu's profile - activity

2020-09-30 16:04:40 +0000 received badge  Notable Question (source)
2019-12-06 12:59:40 +0000 received badge  Famous Question (source)
2019-10-02 11:43:53 +0000 received badge  Famous Question (source)
2019-10-02 11:43:53 +0000 received badge  Notable Question (source)
2019-10-02 11:43:53 +0000 received badge  Popular Question (source)
2018-12-01 06:30:25 +0000 received badge  Famous Question (source)
2018-08-20 10:02:27 +0000 received badge  Notable Question (source)
2018-06-19 04:19:01 +0000 received badge  Popular Question (source)
2018-06-18 06:12:35 +0000 received badge  Popular Question (source)
2018-05-09 19:53:46 +0000 received badge  Taxonomist
2018-01-17 10:48:45 +0000 received badge  Notable Question (source)
2018-01-17 10:48:45 +0000 received badge  Popular Question (source)
2017-12-18 21:04:06 +0000 commented answer How to setup a totally new dissector for the data without UDP/TCP header

Hi Hurris, thank you so much. I am going to use the first one. It should work fine locally now.

2017-12-18 17:59:31 +0000 commented answer How to setup a totally new dissector for the data without UDP/TCP header

Hi Hurris, thank you o much. I am going to use the first one. It should work fine locally now.

2017-12-18 17:57:39 +0000 marked best answer How to setup a totally new dissector for the data without UDP/TCP header

In the chapter 9.2.1 of developing guide book,

there is a disssector example 9.2. (Dissector Handoff)

void proto_reg_handoff_foo(void)
{

    static dissector_handle_t foo_handle;

    foo_handle = create_dissector_handle(dissect_foo, proto_foo);

    dissector_add_uint("udp.port", FOO_PORT, foo_handle);
}

The example always has a related basement, like UDP, TCP or so on. I would like to parse the whole enhanced packet block (data payload) from the first byte(bit) [of course, I have a header in the packet, to identify it from other interface's protocol ], how to wirte the code?

I try to follow plugins\grython code and the developing guide book, but all code are related with some conditions, like udp, or tcp, and just parse the data from a special port, I would like to get help for the new idea.

Thanks in advance.

2017-12-15 18:17:28 +0000 received badge  Commentator
2017-12-15 18:17:28 +0000 commented question How to setup a totally new dissector for the data without UDP/TCP header

/* Reserved for private use. */ { 147, WTAP_ENCAP_USER0 }, { 148, WTAP_ENCAP_USER1 }, { 149,

2017-12-15 17:29:00 +0000 commented question How to setup a totally new dissector for the data without UDP/TCP header

Since LinkType is 2 bytes, I set it to 999 in IDB now, since I know it should be available in my testing for time being.

2017-12-15 16:53:50 +0000 commented question How to setup a totally new dissector for the data without UDP/TCP header

Since LinkType is 2 bytes, I set it to 145 in IDB now, since I know it should be available in my testing for time being.

2017-12-15 16:52:52 +0000 commented question How to setup a totally new dissector for the data without UDP/TCP header

Since LinkType is 2 bytes, I set it to 1000 in IDB now, also it could be 1000 to 2000, since I know it should be availab

2017-12-15 16:52:36 +0000 commented question How to setup a totally new dissector for the data without UDP/TCP header

Since LinkType is 2 bytes, I set it to 1000 now, also it could be 1000 to 2000, since I know it should be available in m

2017-12-15 16:45:28 +0000 commented answer how to change COL_PROTOCOL with lua code

Hi Stig, I also try your way, it is working fine. Thanks!

2017-12-15 16:42:43 +0000 marked best answer how to change COL_PROTOCOL with lua code

With C code, in the code sample, I guess:

Location at the WSDG 9.3. Dissection the code is

 col_set_str(pinfo->cinfo, COL_PROTOCOL, "FOO");

It will change the the content of PROTOCOL in the Wireshark, my question is, how to do the same thing with lua code.

i can see it in the same doc:

11.5.5.9. pinfo.curr_proto

It should be the VAR for changing it. But, how to use the "pinfo.curr_proto" to change protocol in column of main display pane with lua.

Thanks in advance!

2017-12-15 16:42:43 +0000 received badge  Scholar (source)
2017-12-15 07:30:05 +0000 commented question How to setup a totally new dissector for the data without UDP/TCP header

Yes, I need to parse it from the first byte of the whole payload in EPB (pcapng format file), I have some special bytes

2017-12-15 00:37:26 +0000 commented answer how to change COL_PROTOCOL with lua code

Thank you very much, it works very well. With the following code, I also change the column of source and destination.

2017-12-15 00:37:17 +0000 commented answer how to change COL_PROTOCOL with lua code

Thank you very much, it works very well. With the following code, I also change the column of source and destination.

2017-12-15 00:36:42 +0000 commented answer how to change COL_PROTOCOL with lua code

Thank you very much, it works very well. With the following code, I also change the column of source and destination. pk

2017-12-15 00:25:24 +0000 asked a question How to setup a totally new dissector for the data without UDP/TCP header

How to setup a totally new dissector for the data without UDP/TCP header In the chapter 9.2.1 of developing guide book,

2017-12-15 00:24:46 +0000 asked a question How to setup a totally new dissector for the data without UDP/TCP header

How to setup a totally new dissector for the data without UDP/TCP header In the chapter 9.2.1 of developing guide book,

2017-12-13 01:56:18 +0000 edited question how to change COL_PROTOCOL with lua code

how to change COL_PROTOCOL with lua code sorry for the repeating.

2017-12-13 01:54:57 +0000 edited question how to change COL_PROTOCOL with lua code

how to change COL_PROTOCOL with lua code With C code, in the code sample, I guess: Location at "https://www.wireshark.o

2017-12-13 01:54:32 +0000 edited question how to change COL_PROTOCOL with lua code

how to change COL_PROTOCOL with lua code With C code, in the code sample, I guess: Location at "https://www.wireshark.o

2017-12-13 01:53:41 +0000 asked a question how to change COL_PROTOCOL with lua code

how to change COL_PROTOCOL with lua code With C code, in the code sample, I guess: Location at "https://www.wireshark.o

2017-12-13 01:53:08 +0000 asked a question how to change COL_PROTOCOL with lua code

how to change COL_PROTOCOL with lua code With C code, in the code sample, I guess: Location at "https://www.wireshark.o

2017-12-07 17:50:40 +0000 commented answer No CMAKE_C(XX)_COMPILER could be found

Honestly, in the instruction web page the command : choco install VisualStudio2015Community --timeout 0 -package-parame

2017-12-06 23:16:45 +0000 received badge  Rapid Responder (source)
2017-12-06 23:16:45 +0000 answered a question No CMAKE_C(XX)_COMPILER could be found

I found the answer by myself, "https://social.msdn.microsoft.com/Forums/en-US/4d035e42-0618-476b-b309-ae2673f14de4/the

2017-12-06 21:09:02 +0000 commented question No CMAKE_C(XX)_COMPILER could be found

my QT version is 5.6.3, is it a reason for the error? Since I found QT version is 5.9.1 in the instruction web page.

2017-12-06 19:33:13 +0000 edited question No CMAKE_C(XX)_COMPILER could be found

No CMAKE_C(XX)_COMPILER could be found I try to compile wireshark in my windows(10) PC, Follow the instruction "https://

2017-12-06 19:32:30 +0000 edited question No CMAKE_C(XX)_COMPILER could be found

No CMAKE_C(XX)_COMPILER could be found I try to compile wireshark in my windows(10) PC, Follow the instruction "https://

2017-12-06 19:31:46 +0000 edited question No CMAKE_C(XX)_COMPILER could be found

No CMAKE_C(XX)_COMPILER could be found I try to compile wireshark in my windows(10) PC, Follow the instruction "https://

2017-12-06 19:30:49 +0000 asked a question No CMAKE_C(XX)_COMPILER could be found

No CMAKE_C(XX)_COMPILER could be found I try to compile wireshark in my windows(10) PC, Follow the instruction "https://

2017-12-06 19:12:20 +0000 received badge  Rapid Responder (source)
2017-12-06 19:12:20 +0000 answered a question Failed to run MSBuild command (CMake Error at CMakeLists.txt:22 (project))

The dedicated problem is solved, which has been described in the above comments. Thank you guys.

2017-12-06 19:10:42 +0000 commented question Failed to run MSBuild command (CMake Error at CMakeLists.txt:22 (project))

I found it was from windows SDK issue, windows SDK 8.1 is not installed in my PC, so that is it. Of course, after solvi

2017-12-06 18:20:45 +0000 commented question Failed to run MSBuild command (CMake Error at CMakeLists.txt:22 (project))

Hi grahamb, Thank you very much. I just remove my cmake 3.10.0, and install cmake 3.9.6, like: cmake --version cma