Re: control of lua dissectors at run time for better performance

[Doug Rogers <doug.rogers@...>]

Awadhesh Kumar wrote:
> How can I increase the performance of wireshark?
> Currently I have registered 25 udp ports to dissects the message.  Is
> it possible to use multi threaded dissectors based on udp port. Can
> you give me link for that?

I do not know of Wireshark supporting multithreaded Lua dissectors. You
should check on a Wireshark forum or mailing list.

> Is there a way to control whether the LUA script should be engaged or
> not from the Wireshark GUI – e.g. an option to disable/enable select
> LUA script at runtime without messing with the init.lua file.

I do not know of such a control.

First, you should try to make your code efficient.

Second, you could try short-cutting your own dissectors by creating a
preference:

proto.prefs["my_proto.disable_dissector"] =
    Pref.bool("Disable Dissector",
              false,
              "Set this to true and the dissector won't run.")

wsLua (Wireshark Lua) will add the preference to the Edit -> Preferences
dialog. Scroll down to your protocol's name under Protocol on the left
pane then click on it. You'll see the list of preferences. For booleans,
it's a checkbox. The value is stored in ~/.wireshark/preferences under
Linux, or the similar location in Documents and Settings\Username under
Windows.

You'll have to add code to your dissector to honor the preference.
Google for help on that, or find a Wireshark forum.

Doug

______________________________________________________________________________________
The information contained in this email transmission may contain proprietary and business 
sensitive information.  If you are not the intended recipient, you are hereby notified that 
any review, dissemination, distribution or duplication of this communication is strictly 
prohibited.  Unauthorized interception of this e-mail is a violation of law.  If you are not 
the intended recipient, please contact the sender by reply email and immediately destroy all 
copies of the original message.

Any technical data and/or information provided with or in this email may be subject to U.S. 
export controls law.  Export, diversion or disclosure contrary to U.S. law is prohibited.  
Such technical data or information is not to be exported from the U.S. or given to any foreign
person in the U.S. without prior written authorization of Elbit Systems of America and the 
appropriate U.S. Government agency.