Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

I have filtered bt-dht UDP packets. Can Wireshark decode the bencoding for me?

I am a new user of Wireshark, looking to diagnose a problem with two Transmission bit torrent peers not finding each other. Thank you to everyone who helped build this marvellous product. I feel like a superhero when I use it!

I was able to filter out a set of UDP packets which are all bencoded. I think most of them are Bittorrent Distributed Hash Table (DHT) traffic. But while bencoded packets are somewhat readable in the hex display, it would be much easier to read a decoded form.

Is there a way to tell Wireshark that all packets in the filtered list of packets it is displaying conform to the bt-dht protocol, or are bencoded, and have Wireshark decode them into a more human-readable form?

I suppose my fallback could be to export the packets, then write a program to read them in and perform the bencoding. I could do that. But first, since Wireshark does so much else, I'd like to know if it can do this.

I am using Wireshark 1.12.8 (X11) on Mac OS X 10.11 installed via Mac Ports. That's the most current version they have for me. I could install Wireshark 2.6.7 via the official .dmg, and will do that if it helps. My Mac OS version is too old to be able to use the current Wireshark 3.0.0, it says.