IProto wireshark

iproto.lua

local iproto_proto = Proto("iproto", "iproto protocol")
function iproto_proto.dissector(buffer, pinfo, tree)
  pinfo.cols.protocol = "IPROTO"
  local iprotree = tree:add(iproto_proto, buffer(), "IPROTO")
  local buffer_len = buffer:len()
  local offset = 0
  while offset < buffer_len do
     
    local len = buffer((offset + 4), 4):le_uint()
    local sync = buffer((offset+8), 4):le_uint()
    local subtree = iprotree:add(iproto_proto, buffer(), "packet " .. sync)
    subtree:add(buffer(offset, 4), "msg: " ..buffer(offset, 4):le_uint())
    subtree:add(buffer((offset+4), 4), "len: " .. len)
    subtree:add(buffer((offset+8), 4), "sync: " .. sync)
    subtree:add(buffer((offset+12), len), "data: " .. buffer((offset+12), len))
    offset = offset + 12 + len
  end
end
tcp_table = DissectorTable.get("tcp.port")
tcp_table:add(11311, iproto_proto)
-- (c) Maxim Andreev