Wireshark · Wireshark-users: Re: [Wireshark-users] Wireshark Lua question.

[Stig Bjørlykke <stig.bjorlykke@xxxxxxxxx>]

On 5. okt. 2009, at 22.07, Morita, Bill wrote:

> I am seeking help in how to access the source and destination IP  
> from a
>   TCP packet in a LUA dissector of a protocol that uses TCP for  
> transport.

You can use two methods to fetch the IP address:

1. The value in the "Source" column can be fetched from pinfo.src.

2. The value in "ip.src" can be fetched using a Field:

  ip_src_f = Field.new("ip.src") ; must be registred outside the  
dissector

  if ip_src_f() then
    ip_src = ip_src_f().value
  end


When printing you have to use tostring(pinfo.src) or ip_src_f().label


--
Stig Bjørlykke