Wireshark · Ethereal-dev: Re: [Ethereal-dev] Drop support for MATE as lua becomes available?

[LEGO <luis.ontanon@xxxxxxxxx>]

On 3/3/06, Dermot Bradley <dermot.bradley@xxxxxxxxxxxx> wrote:
> Ulf Lamping wrote:
>
> > I didn't had a deep look at the current situation, but I'm asking myself
> > (and others) if we should continue to support MATE (maintain, fix bugs,
> > document, advise users, ...), as lua seems to be the way to go for
> > "scriptable things".
>
> I haven't had more that a passing glance at the Lua stuff in Ethereal so
> far.
It would be hard to get much more right now, as I breaking and fixing
things I hope to render it usable this weekend: consolidate the test
code and automate testing, autogenerate docbook files from the source
etc.

> Does it let you define rules to associate packets together so that you
> can then filter on some of these associations?
Been a full blown programing language it certainly has the facilities
to do it, you've got to write 'em... As said in my prior e-mail in
this thread I plan to add libraries to lua that implememt the
semantics behind MATE.

> That's what I've been tinkering with recently to try and associate
> RADIUS, HTTP, and some other packets together (linking Framed-IP-Address
> in RADIUS to src.addr of other packets and HTTP packets with
> X-Forwarded-For set to the same value).

Small modifications to the RADIUS/SMTP example would allow to do the job.

I've done more complex things with it.

--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan