Skip to content
Diego Nieto Cid edited this page Mar 13, 2015 · 5 revisions

News

  • March 2015: The plugin was updated to make it work on newer versions of Wireshark. More testing needs to be done specially in previous versions (to make sure it still works on them)
  • February 2011: Now the plugin supports W3GS (Warcraft 3 game protocol).

What is this?

packet-bnetp is a Wireshark plugin written in Lua for dissecting the Battle.net® protocol and Warcraft 3 game protocol.

Feel free to give feedback, or don't wonder if the project dies.

How to install?

Since Wireshark 1.4.0

Place the file packet-bnetp.lua in one of the directories in the Lua search path. Wireshark will then load it automatically during startup.

UNIX

  • /share/wireshark/plugins/foo.lua (global)
  • $HOME/.wireshark/plugins/foo.lua (user-specific)

Windows

  • %PROGRAMFILES%\Wireshark\plugins%WIRESHARK_VERSION%\foo.lua (global)
  • %APPDATA%\Wireshark\plugins\foo.lua (user-specific)

Earlier Versions

  1. Install Wireshark. The installation program may show Lua as an optional plugin. If it does, enable it. Using 1.2.x version or higher is highly recommended.

  2. Download packet-bnetp and unpack it to wireshark installation directory. If you want, you may place it anywhere else provided you give the full path to dofile in the next step.

  3. Open init.lua located at Wireshark installation directory and replace -- Lua is disabled by default, comment out the following line to enable Lua support. disable_lua = true; do return end;

    with

     -- Lua is disabled by default, comment out the following line to enable Lua support.
     -- disable_lua = true; do return end;
    

    (it can be already enabled on newer Wireshark versions).

    Then insert

     dofile("packet-bnetp.lua")
    

    at the end of the file.

Screenshots

Click on images to enlarge.

Understanding protocol

Here is the protocol documentation which was used for creating packet-bnetp.