Using TotalView Itch 5.0 Dissectors

Open-Markets-Initiative / wireshark-lua

Source generated cross platform Wireshark dissectors

GNU General Public License v3.0

184 stars 63 forks source link

Using TotalView Itch 5.0 Dissectors #29

Closed justinabate closed 3 years ago

justinabate commented 3 years ago

I'm trying to use:

Nasdaq.Bx.Equities.TotalView.Itch.v5.0.Script.Dissector.lua
Nasdaq.Equities.TotalView.Itch.v5.0.Script.Dissector.lua
Nasdaq.Psx.TotalView.Itch.v5.0.Script.Dissector.lua

With the respective PCAPs from ftp://emi.nasdaq.com/ITCH/ {BX_ITCH_50, NASDAQ_ITCH50, PSX_ITCH_50}

Opening as such:

But I receive errors like this:

Is there something I'm missing?

Open-Markets-Initiative commented 3 years ago

Can you please post example pcaps here as we do do not have access to Nasdaq's ftp site

justinabate commented 3 years ago

They're too large to post in the comment so I've uploaded here: https://www.mediafire.com/folder/w8ovegtr8prnm/ITCH_50

Open-Markets-Initiative commented 3 years ago

I dont think these files are pcaps. Nasdaq probably could tell you more but I believe them to be some proprietary data format produced by Nasdaq. However, I once came across another project that used these files:

https://github.com/DavZim/RITCH

Consider looking there for examples reading these files.