Wireshark

Wireshark is an incredible tool to analyze network traffic.

Adding dissectors

A dissector is a protocol analyzer. It can be written in LUA.

You can put your lua scripts in

• Linux: $HOME/.config/wireshark
• Windows: %AppData%\Wireshark\plugins or %ProgramFiles%\Wireshark\plugins (folders are shown in Help–>About Wireshark–>Folders)

For Linux, you need to add a init.lua script that will load them with dofile("myfile.lua"), in Windows it loads all present in the folder.

In recent versions of Wireshark, LUA bitop can be used directly.

Useful dissectors

ST2026

ST2022_Dissector.lua

Select the "RTP Payload type" 96 to ST2022-6 for ProMPEG FEC.

ULPFEC (RFC 5109)

ulpfec.lua

Select the "RTP Payload type" 96 to ULPFEC for RFC 5109 FEC.

MPEG-TS Dump

mpeg_packets_dump.zip

Use Tools->Dump MPEG TS Packets to export the MPEG-TS stream to a file.