Wireshark (Ethereal) ZRTP packet dissector
VoIP developers may want to use the popular open source Wireshark protocol analyzer, formerly known as Ethereal, to inspect ZRTP packets as part of their development of VoIP applications that use the ZRTP protocol. To this end, Sagar Pai of GSLab has developed a nifty ZRTP packet dissector patch for Wireshark. You can compile it into your own copy of Wireshark and use it to render ZRTP packets in a clear and easily understood format. You can download the ZRTP packet dissector patch for Wireshark here:
- Click here to download the ZRTP patch for Wireshark version 1.0.0, for ZRTP version 0.83
(last updated 4 April 2008)
The ZRTP protocol is still an Internet Draft, so it may evolve a bit more before it finally gets carved in stone as an RFC. Because of this, the ZRTP dissector patch may have to be revised to handle later versions of ZRTP packets. Continue to check back on this web page for the latest version. Please email any bug reports related only to this ZRTP packet dissector Wireshark patch directly to its developer, Sagar Pai (sagarpai at gmail dot com).
ZRTP Internet Draft and libZRTP SDK for developers
ZRTP packet formats are defined in the ZRTP Internet Draft. We also have a software development kit to help you implement ZRTP in your VoIP application. Click here to see the Zfone libZRTP SDK documentation. For general information about the ZRTP SDK, including licensing information, see the Zfone libZRTP SDK page.
Screen shot of Wireshark ZRTP packet dissector
Here's what it looks like, inspecting a typical ZRTP packet: