Muxshark

A wireshark plugin for the Mux protocol.

Features

This wireshark dissector provides basic decoding of all Mux messages including:

• Frame length
• Message type
• Tag number

Tdispatch messages also include decoding of contexts, destination and Dtabs.

Installation

Wireshark is available at wireshark.org.

Copy mux_dissector.lua to your wireshark personal plugins directory. On Mac OS X, you can find this directory by going to Wireshark -> About Wireshark -> Folders, and locate the entry for Personal Plugins. You should create this directory if it does not yet exist.

The dissector will be available after the next launch of the application.

Usage

Launch Wireshark or tshark and open it with a tcpdump capture that includes Mux packets. The heuristic detector should recognize mux packets, but should it fail, use "Decode As..." on a packet.