On Fri, Jul 09, 2010 at 04:28:25PM +0200, Jaap Keuter wrote:
> Nowadays we see more and more the broadcasts as attached.
> Currently it's decoded as plain Data,
> which it obviously is not, it's readable text!
It's not just readable text, it looks like JSON :)
> A quick peek at the IANA port list [1] shows it's Dropbox
> LanSync Discovery.
>
> So here's the project: CREATE A DISSECTOR FOR THE
> DROPBOX LANSYNC DISCOVERY PROTOCOL
I cheated a little and add support for heurestics to JSON dissector [1] :)
Screenshot after disabling db-lsp-disc protocol:
http://szara.chmurka.net/wireshark-json-dropbox.png
So for people who want to play it should be a little easier now.
However I can't find Dropbox LanSync Discovery protocol description,
so I don't know if every packet is JSON.
Cheers.
[1] https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4753
