News

• March 2024: W3GS part of the plugin is now ported to xproto
• February 2024: The BNETP part of the plugin was rewritten using xproto which is a DSL for writting dissectors based on the core of the legacy packet-bnetp. For now, Warcraft 3 Game Protocol is only supported in the legacy branch.
• March 2015: The plugin was updated to make it work on newer versions of Wireshark. More testing needs to be done specially in previous versions (to make sure it still works on them)
• February 2011: Now the plugin supports W3GS (Warcraft 3 game protocol).

What is this?

packet-bnetp is a Wireshark plugin written in Lua for dissecting the Battle.net® client-server protocol, which is used by Starcraft, Warcraft 2 Battle.Net edition, Warcraft 3, Diablo 1, Diablo 2, and Warcraft 3 game protocol.

Feel free to give feedback!

Requirements

packet-bnetp was tested with Wireshark 1.10.5, which is Windows XP compatible. Older versions with Lua 5.1 may work too, newer should work too.

How to install?

Download packet-bnetp.

Place the file packet-bnetp.lua in one of the directories in the Lua search path. Wireshark will then load it automatically during startup.

UNIX

• /usr/share/wireshark/plugins/foo.lua (global)
• $HOME/.wireshark/plugins/foo.lua (user-specific)

Windows

• %PROGRAMFILES%\Wireshark\plugins%WIRESHARK_VERSION%\foo.lua (global)
• %APPDATA%\Wireshark\plugins\foo.lua (user-specific)

Screenshots

Click on images to enlarge.

Understanding protocol

Here is the protocol documentation which was used for creating packet-bnetp.