host 172.18.5.4

net 192.168.0.0/24

net 192.168.0.0 mask 255.255.255.0

src net 192.168.0.0/24

src net 192.168.0.0 mask 255.255.255.0

port 53

port not 53 and not arp

ip

ether proto 0x888e

http

ip.src == x.x.x.x

http

frame.time >= "YYYY-MM-DD HH:MM:SS" && frame.time <= "YYYY-MM-DD HH:MM:SS

frame contains google

sudo create_ap wlan0 wlan0 Operator 12345678 -w 2 -c 2 -m nat --freq-band 2.4 --country US

sudo tcpdump --interface=ap0 -n udp host 192.168.2.1 
-w /tmp/dumps/capture.pcap

local a = 25
local b = 5

local result = a + b

print(result) -- Output: 30

local temperature = 15
local heatSetting = 0

if temperature < 0 then heatSetting = 3
elseif temperature <= 20 then heatSetting = 2
else heatSetting = 1 end

print(heatSetting) -- Output: 2

-- While Loops
local i = 0

while i < 10 do 
  i = i + 1
end

print(i) -- Output: 10

-- For Loops
local i = 0

-- i = first, last, delta
for i = 0, 10, 1 do
  print(i)
end

print(i) -- Output: 10

local new_table = {}

-- Table value assignment
new_table[20] = 10
new_table["x"] = "test"
a.x = 10  

function add(arg1, arg2)
    return arg1 + arg2
end

local added_number = add(2, 3)
print(added_number) -- Output: 5

-- Create a new protocol for our custom protocol
local custom_protocol = Proto("CustomProtocol", "Custom Protocol")

-- Define the fields of our custom protocol
local field1 = ProtoField.uint8("custom_protocol.field1", "Field 1", base.DEC)
local field2 = ProtoField.string("custom_protocol.field2", "Field 2")

-- Register the fields to the custom protocol
custom_protocol.fields = { field1, field2 }

-- Create a function to dissect the packets of our custom protocol
function custom_protocol.dissector(buffer, pinfo, tree)
  -- Create a subtree for our custom protocol in the Wireshark GUI
  local subtree = tree:add(custom_protocol, buffer(), "Custom Protocol Data")

  -- Extract and display the values of Field 1 and Field 2
  local field1_value = buffer(0, 1):uint()
  subtree:add(field1, buffer(0, 1)):append_text(" (Value: " .. field1_value .. ")")

  local field2_value = buffer(1, 5):string()
  subtree:add(field2, buffer(1, 5)):append_text(" (Value: " .. field2_value .. ")")
end

-- Register our custom protocol as a dissector in Wireshark
local udp_port = DissectorTable.get("udp.port")
udp_port:add(12345, custom_protocol)