Wireshark · Wireshark-users: Re: [Wireshark-users] Wireshark Lua question.

[Guy Harris <guy@xxxxxxxxxxxx>]

On Oct 5, 2009, at 1:50 PM, Stig Bjørlykke wrote:

> You can use two methods to fetch the IP address:
>
> 1. The value in the "Source" column can be fetched from pinfo.src.
>
> 2. The value in "ip.src" can be fetched using a Field:

I would suggest pinfo.src, as that way you can handle both IPv4 and  
IPv6 - ip.src doesn't exist if TCP is being carried over IPv6.