Update Wireshark dissector spec

nanocurrency / nano-node

Nano is digital currency. Its ticker is: XNO and its currency symbol is: Ӿ

https://nano.org

BSD 3-Clause "New" or "Revised" License

3.47k stars 783 forks source link

Update Wireshark dissector spec #2963

Open zhyatt opened 3 years ago

zhyatt commented 3 years ago

The Wireshark dissector spec for Nano has fallen out-of-date as protocol changes have occurred the past couple years, so an update is needed.

Current version: https://www.wireshark.org/docs/dfref/n/nano.html
Previous owner profile/change history: https://code.wireshark.org/review/#/q/owner:roland%2540haenel.me+status:merged
Nano protocol reference: https://github.com/nanocurrency/protocol

cryptocode commented 3 years ago

Maybe someone finds this useful while we wait for Wireshark to get an update:

https://github.com/cryptocode/nanocap has been updated with tcp support. The tcp stream reassembly logic is a bit of work in progress, but the entire Nano protocol spec is now covered. It also adds connection tracing (too see what a connection does at a given time)

Should serve as a helpful source for the Wireshark implementer along with the spec.

dsiganos commented 2 years ago

@shryder has also done this: https://github.com/shryder/NANOWiresharkDissector I wouldn't say it is complete but it is my go to tool for inspecting nano traffic.

I once tried to use nanocap but it didn;t work for me but that was very early on. I should probably try again.

cryptocode commented 2 years ago

I should probably try again.

Feel free to DM me on Discord if you have issues so any bugs can get fixed. I have no issues locally at least. If someone gets Wireshark up to date, that's preferable to a custom tool though.