f_crc, buffer ( offset, 1 )) offset = offset + 1 - Add end t_razer : add ( f.

f_command_params, buffer ( offset, num_params - 1 )) offset = offset + 79 - skip to the end - Add CRC t_razer : add ( f. f_sub_command, buffer ( offset, 1 )) offset = offset + 1 - Add command params t_razer : add ( f.

f_command, buffer ( offset, 1 )) offset = offset + 1 - Add sub command t_razer : add ( f. f_reserved2, buffer ( offset, 1 )) offset = offset + 1 - Add Command t_razer : add ( f. f_number_parameter_bytes, buffer ( offset, 1 )) - specifid buffer here instead of num params so it highlights in wireshark offset = offset + 1 - Add Reserved 2 t_razer : add ( f. f_reserved1, buffer ( offset, 3 )) offset = offset + 3 - Add Number of parameters bytes local num_params = buffer ( offset, 1 ): le_uint () t_razer : add ( f. f_id, buffer ( offset, 1 )) offset = offset + 1 - Add Reserved 1 t_razer : add ( f. f_reqtype, buffer ( offset, 1 )) offset = offset + 1 - Add ID t_razer : add ( f. cols : append ( 'Response' ) end - Add REQ,RES byte t_razer : add ( f. cols = 'Razer' local offset = 0 local t_razer = tree : add ( razer_proto, buffer ()) if ( data_direction. Thanks to karlp for making a nice lua protocol example for USB - Copyright 2015 Terry Cain - To install put in ~/.wireshark/plugins/a - or ran with wireshark -X lua_script:a - Could of binded it to the Razer USB Vendor:Product ID but when wiresharking USB comms to virtualbox - wireshark can miss the VID,PID declaration and then the dissector wouldn't apply so just use it when - dissecting razer traffic, don't use it all the time as it'll apply to all usb-control requests razer_proto = Proto ( 'razer', 'Razer Protocol' ) local req_types = for ix, finfo in ipairs(fields) do print(string.format('ix=%d, finfo.name = %s, finfo.value=%s', ix, finfo.name, getstring(finfo))) end print(' ')-]] local data_length = f_data_len () local data_direction = f_usb_ep_dir () local urb_length = f_urb_len () if ( data_length.

Wireshark use protocol lua