wireshark lua插件

最新推荐文章于 2025-02-27 20:44:41 发布

转载最新推荐文章于 2025-02-27 20:44:41 发布 · 131 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：https://my.oschina.net/richard28530/blog/1548151

文章标签：

#lua #python #网络

本文介绍了一个名为SDrop的协议，该协议用于记录流媒体数据包的丢弃情况及其原因。文章详细展示了如何使用Lua脚本解析包含丢弃数据包信息的字段，并通过正则表达式获取关键数据。

2019独角兽企业重金招聘Python工程师标准>>>

<pre> do local p_sdrop = Proto("sdrop", "Streaming drop packet and drop reason"); local sdrop_protocol_type = ProtoField.string("sdrop.prototype", "Protocol type",base.NONE) local sdrop_version = ProtoField.string("sdrop.version", "Model version", base.NONE) local sdrop_meta_ingress_port = ProtoField.string("sdrop.inport", "Ingress physical port", base.NONE) local sdrop_meta_egress_port = ProtoField.string("sdrop.outport", "Egress physical port", base.NONE) local sdrop_meta_vlan_id = ProtoField.string("sdrop.vlanid", "Vlan id", base.DEC) local sdrop_meta_drop_reason = ProtoField.string("sdrop.stamp", "Drop reason", base.NONE) local sdrop_meta_drop_reason_str = ProtoField.string("sdrop.stamp", "Drop reason string", base.NONE) local sdrop_meta_time_stamp = ProtoField.string("sdrop.stamp", "Last detect time", base.NONE) local sdrop_meta_packet_size = ProtoField.string("sdrop.pktsize", "Oringinal packet length", base.DEC) local sdrop_meta_data_size = ProtoField.string("sdrop.datasize", "Data length", base.DEC) p_sdrop.fields = { sdrop_protocol_type, sdrop_meta_ingress_port, sdrop_meta_egress_port, sdrop_meta_vlan_id, sdrop_meta_drop_reason, sdrop_meta_drop_reason_str, sdrop_meta_time_stamp, sdrop_meta_packet_size, sdrop_meta_data_size, } local function get_element(str, key) local pattern = "<"..key..">(.*)</"..key..">" for w in string.gmatch(str, pattern) do return w end end function p_sdrop.dissector(buf, pinfo, root) local payload = buf(0, buf:len() - 1) local raw_pkt = get_element(payload:string(), "data") local datasize = get_element(payload:string(), "dataSize") local pktsize = get_element(payload:string(), "packetSize") local timestamp = get_element(payload:string(), "timeStamp") local dropreason = get_element(payload:string(), "dropReason") local dropreasonstr = get_element(payload:string(), "dropReasonString") local vlanid = get_element(payload:string(), "vlanId") local inport = get_element(payload:string(), "ingressPhysicalPort") local outport = get_element(payload:string(), "egressPhysicalPort") local s1,s2 = string.find(payload:string(), "<data>") local e1,e2 = string.find(payload:string(), "</data>") local sdrop_tree = root:add(p_sdrop, buf:range(offset, s1)) sdrop_tree:add(sdrop_protocol_type, "SDrop") sdrop_tree:add(sdrop_meta_ingress_port, inport) sdrop_tree:add(sdrop_meta_egress_port, outport) sdrop_tree:add(sdrop_meta_vlan_id, vlanid) sdrop_tree:add(sdrop_meta_drop_reason, dropreason) sdrop_tree:add(sdrop_meta_drop_reason_str, dropreasonstr) sdrop_tree:add(sdrop_meta_time_stamp, timestamp) sdrop_tree:add(sdrop_meta_packet_size, pktsize) local eth_dis = Dissector.get("eth_withoutfcs") local b = ByteArray.new(raw_pkt) local buf_frame = ByteArray.tvb(b, "Raw Payload") eth_dis:call(buf_frame, pinfo, root) end local udp_encap_table = DissectorTable.get("udp.port") udp_encap_table:add(32768, p_sdrop) end </pre>

转载于:https://my.oschina.net/richard28530/blog/1548151