User Guide

Wireshark User's Guide
vii
10.3. Packet colorization .......................................................................................... 150
10.4. Control Protocol dissection ................................................................................ 153
10.4.1. The "Enabled Protocols" dialog box ......................................................... 153
10.4.2. User Specified Decodes .......................................................................... 154
10.4.3. Show User Specified Decodes ................................................................. 155
10.5. Preferences ..................................................................................................... 156
10.5.1. Interface Options .................................................................................. 157
10.6. Configuration Profiles ...................................................................................... 158
10.7. User Table ..................................................................................................... 160
10.8. Display Filter Macros ....................................................................................... 160
10.9. ESS Category Attributes ................................................................................... 160
10.10. GeoIP Database Paths ..................................................................................... 161
10.11. IKEv2 decryption table ................................................................................... 161
10.12. Object Identifiers ........................................................................................... 162
10.13. PRES Users Context List ................................................................................ 162
10.14. SCCP users Table .......................................................................................... 162
10.15. SMI (MIB and PIB) Modules .......................................................................... 163
10.16. SMI (MIB and PIB) Paths ............................................................................... 163
10.17. SNMP Enterprise Specific Trap Types ............................................................... 163
10.18. SNMP users Table ......................................................................................... 163
10.19. Tektronix K12xx/15 RF5 protocols Table ........................................................... 164
10.20. User DLTs protocol table ................................................................................ 164
11. Lua Support in Wireshark ........................................................................................... 165
11.1. Introduction .................................................................................................... 165
11.2. Example of Dissector written in Lua ................................................................... 165
11.3. Example of Listener written in Lua ..................................................................... 166
11.4. Wireshark's Lua API Reference Manual ............................................................... 167
11.5. Saving capture files ......................................................................................... 167
11.5.1. Dumper ............................................................................................... 167
11.5.2. PseudoHeader ....................................................................................... 168
11.6. Obtaining dissection data .................................................................................. 169
11.6.1. Field ................................................................................................... 169
11.6.2. FieldInfo ............................................................................................. 170
11.6.3. Non Method Functions ........................................................................... 171
11.7. GUI support ................................................................................................... 171
11.7.1. ProgDlg ............................................................................................... 171
11.7.2. TextWindow ........................................................................................ 172
11.7.3. Non Method Functions ........................................................................... 175
11.8. Post-dissection packet analysis ........................................................................... 177
11.8.1. Listener ............................................................................................... 177
11.9. Obtaining packet information ............................................................................. 178
11.9.1. Address ............................................................................................... 178
11.9.2. Column ............................................................................................... 179
11.9.3. Columns .............................................................................................. 180
11.9.4. NSTime ............................................................................................... 180
11.9.5. Pinfo ................................................................................................... 181
11.9.6. PrivateTable ......................................................................................... 184
11.10. Functions for writing dissectors ........................................................................ 184
11.10.1. Dissector ............................................................................................ 184
11.10.2. DissectorTable .................................................................................... 185
11.10.3. Pref ................................................................................................... 186
11.10.4. Prefs ................................................................................................. 188
11.10.5. Proto ................................................................................................. 188
11.10.6. ProtoField .......................................................................................... 189