Wireshark-dev: [Wireshark-dev] lua and ss7 mtp2
From: Cristian Constantin <const.crist@xxxxxxxxxxxxxx>
Date: Fri, 15 Mar 2013 19:24:39 +0100
hi! I am trying to access from a lua script the length indictator field of the mtp2 protocol. 1. yes, I am sure that the capture contains ss7 mtp2 traffic 2. yes, I am sure that the filter selects the ss7 mtp2 traffic. 3. I am using wireshark: wireshark -v wireshark 1.8.2 Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Compiled (64-bit) with GTK+ 2.24.10, with Cairo 1.12.2, with Pango 1.30.0, with GLib 2.32.4, with libpcap, with libz 1.2.7, with POSIX capabilities (Linux), with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.1, without Python, with GnuTLS 2.12.20, with Gcrypt 1.5.0, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built Jul 20 2011 00:01:38), with AirPcap. Running on Linux 3.1.0-1-amd64, with locale en_US.UTF-8, with libpcap version 1.1.1, with libz 1.2.3.4, GnuTLS 2.12.19, Gcrypt 1.5.0, without AirPcap. Built using gcc 4.7.2. does anyone here know why for example this snippet: local mtp2_li_field = Field.new("mtp2.li") function tap.packet(pinfo, tvb) local mtp2_len = mtp2_li_field() print("mtp2 len:", tostring(mtp2_len)) print("mtp2 len:", tostring(mtp2_len.value)) end dumps something like: mtp2 len: nil [string "get_isup.lua"]:187: attempt to index local 'mtp2_len' (a nil value) ?? otoh this one: local mtp2_field = Field.new("mtp2") function tap.packet(pinfo, tvb) local mtp2 = mtp2_field() local l = string.byte(mtp2.value,3); end barks like this: [string "get_isup.lua"]:189: bad argument #1 to 'byte' (string expected, got userdata) on a more general note, how to use lua in wireshark with binary protocols when lua lacks built-in support for working with binary values (i.e. pack/unpack, oct a la perl)??? I mean I have found and I have used the "struct" package from here: http://www.inf.puc-rio.br/~roberto/struct/ but in this case it does not seem to be enough... thanks a lot! bye now! cristian
- Prev by Date: Re: [Wireshark-dev] Automatic update USB Vendor ID / Product ID
- Next by Date: Re: [Wireshark-dev] qtshark -> wireshark-qt ?
- Previous by thread: Re: [Wireshark-dev] Problems building easy_codec.dll
- Next by thread: Re: [Wireshark-dev] lua and ss7 mtp2
- Index(es):
- Get Wireshark
- Download
- Code of Conduct