Skip to content

dxFeed/wireshark-qd-plugin

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

16 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

About

A Lua plugin for Wireshark to parse the QD protocol.

Requirements

Wireshark >= 3.6.21

Installation

Copy the files (qd_proto.lua and qd_proto folder) to the Wireshark Lua Plugins folder. You can find the location of the Lua Plugins folder in Help->About Wireshark->Folders (in macOS Wireshark->About Wireshark->Folders). It should be "Personal Lua Plugin".

Verifying the plugin

Start Wireshark, there should be no error messages related to any plugins, now select (as before) Help, then About Wireshark, instead of clicking the Folders Tab, select the Plugins Tab.

Note

To reassemble out-of-order TCP segments, select the TCP protocol option "Reassemble out-of-order segments" (currently disabled by default). If this setting is not enabled, QD packets may not be recognized in case of errors at the TCP layer. You can enable this setting in Edit->Preferences->Protocols->TCP.

Reassemble TCP

How to use

Right click on the packet and select "Decode As...". In the window that opens, select the value of the TCP port and the Current QD protocol, click OK.

Decode As...