wireshark的插件是使用lua语言开发的,wireshark并未内置CMCC Portal协议,日常工作会经常分析Portal协议,找到相关资料,开发了一个简单的插件,可解析CMCC Portal协议。
CMCC Portal协议报文头C语言数据结构
struct cmcc_portal_header{
unsigned char version;
unsigned char type;
unsigned char mode;
unsigned char reserved;
unsigned short serialno;
unsigned short reqid;
unsigned int userip;
unsigned short userport;
unsigned char errorcode;
unsigned char attrnum;
}
---
使用方法:将如下代码粘贴到cmccportal.lua文件中,将cmccportal.lua放在Wireshark的安装目录,修改init.lua,将disable_lua设置为false,在文件最后添加dofile(DATA_DIR.."cmccportal.lua")