/hazelcast-dissector-for-wireshark

Hazelcast 4+ member protocol dissector

Primary LanguageCGNU General Public License v2.0GPL-2.0

Hazelcast 4+ member protocol dissector for WireShark

Screenshot

What's dissected

Protocol header

Just 3 bytes: HZC

Member packet

Packet

HeapData (payload)

HeapData

Serialized DataSerializable

Type (Serialization format) = -2
IDS flag=0

DataSerializable

Serialized IdentifiedDataSerializable

Type (Serialization format) = -2
IDS flag=1

IdentifiedDataSerializable

Building on Ubuntu (20.04)

Prerequisities

sudo apt install build-essential wireshark wireshark-dev cmake

Build and install

# it's cleaner when we don't build it direcly in the source dir - let's create a separate one
mkdir build
cd build
cmake ..
# build and install it to ${HOME}/.local/lib/wireshark/plugins/...
make install

For building whole Wireshark from sources take a look at https://gist.github.com/syneart/2d30c075c140624b1e150c8ea318a978

Generate packet layout images

sudo pip3 install nwdiag
cd imgs
for i in *.diag; do packetdiag $i; done