Thank you for getting back to me so quickly,
So you're saying that I can edit the text in the pinfo.columns field,
which should mean that I can change say Protocol, where it normally puts
TCP, UDP, etc. to any string that I want? If so, what would be the
correct syntax to do so? pinfo.columns:_newindex("Protocol",
"NameOfProto") doesn't seem to work, which makes me think that my syntax
is off.
Brent Rowswell
-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Luis EG
Ontanon
Sent: Friday, June 13, 2008 4:57 AM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] LUA development changing column headers
You cannot add columns that way using Lua, Lua can use just the columns
that are already there under pinfo.columns ...
The outdated example you talk about does not create a column it just
switches over the src and dst addresses.
On Fri, Jun 13, 2008 at 12:04 AM, Rowswell, Brent
<brent.rowswell@xxxxxxxx> wrote:
> Over the past few weeks I've been trying to make a LUA script to parse
> out my header information, open up the packet and display the
> necessary data in a various tree structure. So far all of that has
> been done well enough, but I find that the packets that I have
> dissected come maybe once every 300 packets, which makes it pretty
> hard to compare packets. What I've been trying to do is either edit
> the packet column data, such as where the ip source or destination is
> displayed into my own data, or add a new column of my own type so that
> I can sort the data, which will then put all of my packets next to
> each other. I know that on the wiki of lua examples there's an
> outdated way of doing something similar, but it no longer works with
> the current 1.0.0 build of wireshark. I was wondering if I could get
> some help in how the syntax should look, for instance if this would
> work: using pinfo.cols to grab the packet's columns, and upon that
> use :_newindex("Msgtype", "NameofMsg") to put in a new column named
> Msgtype where this packets data in that column would be NameofMsg,
> thus the message would look like
>
> pinfo.cols:_newindex("Msgtype","NameofMsg")
> If anyone can think of another way of doing this, either by adding a
> new column or changing the text of an existing one, I would be
appreciative.
>
> Brent Rowswell
>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> https://wireshark.org/mailman/listinfo/wireshark-dev
>
>
--
This information is top security. When you have read it, destroy
yourself.
-- Marshall McLuhan
_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-dev