Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] lua decoder accessing info from layers above

From: "Maynard, Chris" <Christopher.Maynard@xxxxxxx>
Date: Wed, 14 Oct 2020 15:50:34 +0000
> From: Wireshark-dev <wireshark-dev-bounces@xxxxxxxxxxxxx> On Behalf Of qiangxiong.huang
> Sent: Wednesday, October 14, 2020 11:35 AM
> To: Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
> Subject: Re: [Wireshark-dev] lua decoder accessing info from layers above
>
> The best way is to check the pinfo. port_type to get the current transport protocol type.  There is an example on this page: https://gitlab.com/wireshark/wireshark/-/wikis/protobuf
>

Indeed.  Thanks for pointing this out.  Although I'd say the Lua documentation about the port_type[1] is a bit lacking here.  One needs to look at address.h[2] to find out what the values mean.

(Still curious why "frame.protocols" doesn’t work though.)
- Chris
[1]: https://www.wireshark.org/docs/wsdg_html_chunked/lua_module_Pinfo.html
[2]: https://gitlab.com/wireshark/wireshark/-/blob/master/epan/address.h#L360











CONFIDENTIALITY NOTICE: This message is the property of International Game Technology PLC and/or its subsidiaries and may contain proprietary, confidential or trade secret information. This message is intended solely for the use of the addressee. If you are not the intended recipient and have received this message in error, please delete this message from your system. Any unauthorized reading, distribution, copying, or other use of this message or its attachments is strictly prohibited.