Wireshark自定义协议RPUDPDL-同序号包统计插件

最新推荐文章于 2025-10-31 01:24:01 发布

原创

最新推荐文章于 2025-10-31 01:24:01 发布 · 2.1k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#wireshark #download #statistics #插件 #udp

本文介绍了一款名为rpudpdl-stat-ssidsn.lua的Wireshark插件，用于分析下载过程中出现的超过1M限速的情况。该插件依赖于Wireshark的RPUDPDL UDP下载C版插件，不兼容lua版，因为lua定义的协议字段注册问题会导致错误。插件运行效果展示了详细的统计信息。

rpudpdl-stat-ssidsn.lua

-- reference "Wireshark User's Guide - Chapter 11. Lua Support in Wireshark"

-- This program will register a menu that will open a window with a count of occurrences
-- of every sn in the capture

do
   local rpudpdls = {}
   local f_rpudpdl_sn = Field.new("rpudpdl.sn")
   local f_rpudpdl_ssid = Field.new("rpudpdl.ssid")
   local f_rpudpdl_msgtype = Field.new("rpudpdl.msgtype")

   -- this is our tap
   local tap = Listener.new(tap, "rpudpdl");

   function getkey(ssid, sn)
        return ssid .. " " .. sn
   end

   -- this function will be called once for each packet
   function tap.packet(pinfo,tvb)
      local rpudpdl_ssid = f_rpudpdl_ssid()
      local rpudpdl_sn = f_rpudpdl_sn()
      local rpudpdl_msgtype = f_rpudpdl_msgtype()

      local ssid = rpudpdl_ssid.value
      local sn = rpudpdl_sn.value
      local msgtype = rpudpdl_msgtype.value
      local key = getkey(ssid, sn)