ethereumdevp2pwireshark_dissector

June 12, 2018 · View on GitHub

This is Ethereum devp2p protocol dissector plugin for wireshark.

Support RLP decode and PING/PONG/FINDNODE/NEIGHBORS packets.

INSTALL

Download ethereum.lua
Put it in your Wireshark plugins folder.
- On MAC OSX: ~/.config/wireshark/plugins (older Wireshark versions it may be: ~/.wireshark/plugins)
- On Windows: C:\Users<username>\AppData\Roaming\Wireshark\plugins
- On Linux: ~/.wireshark/plugins

SCREENSHOTS

Neighbors

About us

BCSEC is a blockchain security group which aims to elevate the security of entire blockchain ecosystem. Please visit https://bcsec.org for more information.

REFERENCE

devp2p overview https://github.com/ethereum/devp2p
Node Discovery Protocol v4 https://github.com/ethereum/devp2p/blob/master/discv4.md
RLP (Recursive Length Prefix) https://github.com/ethereum/wiki/wiki/RLP