ethereum_devp2p_wireshark_dissector icon indicating copy to clipboard operation
ethereum_devp2p_wireshark_dissector copied to clipboard

This is Ethereum devp2p protocol dissector plugin for wireshark.

ethereum_devp2p_wireshark_dissector

This is Ethereum devp2p protocol dissector plugin for wireshark.

Support RLP decode and PING/PONG/FINDNODE/NEIGHBORS packets.

INSTALL

  1. Download ethereum.lua
  2. Put it in your Wireshark plugins folder.
    • On MAC OSX: ~/.config/wireshark/plugins (older Wireshark versions it may be: ~/.wireshark/plugins)
    • On Windows: C:\Users<username>\AppData\Roaming\Wireshark\plugins
    • On Linux: ~/.wireshark/plugins

SCREENSHOTS

Neighbors

About us

BCSEC is a blockchain security group which aims to elevate the security of entire blockchain ecosystem. Please visit https://bcsec.org for more information.

REFERENCE

  • devp2p overview https://github.com/ethereum/devp2p
  • Node Discovery Protocol v4 https://github.com/ethereum/devp2p/blob/master/discv4.md
  • RLP (Recursive Length Prefix) https://github.com/ethereum/wiki/wiki/RLP