The specific script msg_a is as follows: - Implementation of custom protocol parsing through Lua script programming Through Lua language, plug-ins can be written to realize the analysis of MSG. Based on the above reasons, in order to help analysis, it is imperative to write plug-in script analysis. The content of each field can be known by wireshark, but if the message structure is complex, it needs to calculate the offset to get the specified field value moreover, if the message structure contains the bit field field field field, it will be more complex and hurt the eyes finally, it is impossible to use the specified field in the message field to filter the message. The message MSG (12Byte) +business data (988Byte) is transmitted together, and the captured message is as follows: Suppose that the data structure MSG that needs to be transmitted through TCP is as follows: #define DATA_LEN_MAX 1000 Welcome God's correction and instruction. Starting with a custom simple message protocol, this paper analyses how to write WireShark plug-in through lua to parse the custom message protocol. Binary data brings some difficulties to protocol analysis and problem checking, especially when the content of protocol is complex. Wireshark can not specifically interpret the meanings of various fields, and can only display the received ones.

For example, the interaction protocols between game client and server are usually private. But in practical application, these protocols are usually only the carriers of our data transmission process, and many communication protocols between software are private. Because of open source, it is easy for users to develop again, which makes the sword's appearance and function almost perfect.įor the current mainstream protocols, there are self-contained parsing plug-ins, such as IP, ARP, TCP, UDP, HTTP, DHCP and so on. Although it has a long history, its sharpness has not been reduced at all. WireShark is undoubtedly relying on the Sword of Heaven in the arsenal of ICT personnel for network analysis.

Wireshark linux init.lua