Ask Your Question

Revision history [back]

How can I edit or expand a protocol like `bitcoin`

The bitcoin protocol analyzer in Wireshark is great, but it's out of date. There are new message types, such as cmpctblock (Compact Block) that I need to analyze with the same ease as block messages.

When WS gets a block message, it is able to deconstruct it and label the parts of the message nicely (block version, merkle root, timestamp, etc.) I would like to define fields such as these for the bitcoin protocol messages that are not yet built in to the filter.