在 Wireshark 中使用 Lua 创建非以太网数据解析器

如果您查看packet-i2c.c源文件，您将在第258行看到需要使用“i2c.message”表向您的解析器进行注册，类似于在Wireshark的问答站点中描述的如何为802.1Q Ethernet有效载荷注册Lua解析器。因此，在您的情况下，可以使用以下方式：

-- Protocol
local p_i2cfoo = Proto("i2cfoo", "I2C FOO Protocol")

-- Fields
local f_i2cfoo_addr = ProtoField.uint8("i2cfoo.addr", "Address", base.DEC)
local f_i2cfoo_val16 = ProtoField.uint16("i2cfoo.val16", "Value 16", base.HEX)
local f_i2cfoo_val32 = ProtoField.uint32("i2cfoo.val32", "Value 32", base.HEX)

p_i2cfoo.fields = { f_i2cfoo_addr, f_i2cfoo_val16, f_i2cfoo_val32 }

-- Dissection
function p_i2cfoo.dissector(buf, pinfo, tree)
    local i2cfoo_tree = tree:add(p_i2cfoo, buf(0,-1))

    pinfo.cols.protocol:set("I2CFOO")
    pinfo.cols.info:set("Hello World!")

    i2cfoo_tree:add(f_i2cfoo_addr, buf(0, 1))
    i2cfoo_tree:add(f_i2cfoo_val16, buf(1, 2))
    i2cfoo_tree:add(f_i2cfoo_val32, buf(3, 4))
end

-- Registration
local i2c_table = DissectorTable.get("i2c.message")
i2c_table:add(0, p_i2cfoo)