Wireshark-users: Re: [Wireshark-users] Wireshark Lua question.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 5 Oct 2009 14:10:20 -0700

On Oct 5, 2009, at 1:50 PM, Stig Bjørlykke wrote:

You can use two methods to fetch the IP address:

1. The value in the "Source" column can be fetched from pinfo.src.

2. The value in "ip.src" can be fetched using a Field:

I would suggest pinfo.src, as that way you can handle both IPv4 and IPv6 - ip.src doesn't exist if TCP is being carried over IPv6.