This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Does wireshark have a BSON dissector?

0

I've got a network protocol that uses BSON over TLS, and I'd like to dissect the BSON. I can decrypt the TLS session correctly, but the only protocol option I can use successfully is "data", which displays just the hex.

Is there a BSON dissector that I can use to decrypt the "Application Data" inside a TLS session?

asked 20 Nov '13, 12:16

Roger%20Lipscombe's gravatar image

Roger Lipscombe
11●1●1●2
accept rate: 0%

One Answer:

0

Does wireshark have a BSON dissector?

Yes and No.

There is a BSON dissector, however it's (only) part of the dissector for the MongoDB wire protocol.

So, if you're using BSON directly over TLS, you won't be able to dissect that with Wireshark as it's not structured like the MongoDB wire protocol.

If you need a 'generic' BSON dissector these are your options:

  • Take a look at the MongoDB dissector (packet-mongo.c) and try to build your own BSON dissector based on the that code
  • File an enhancement 'bug' at https://bugs.wireshark.org and add a sample capture file.

Regards
Kurt

answered 20 Nov '13, 16:17

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%