Last active
June 16, 2021 15:55
-
-
Save simonswine/5cb044a3ddf6549d8bfeac078d598514 to your computer and use it in GitHub Desktop.
How to decode GRPC with tshark
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# configure protobuf search paths | |
# ensure you are in a cloned loki root path | |
cat > ~/.config/wireshark/protobuf_search_paths <<EOF | |
"$(pwd)/pkg/logproto","TRUE" | |
"$(pwd)","FALSE" | |
"$(pwd)/vendor","FALSE" | |
"/nix/store/drrmxvscqaa6521a46lqwkhhv82qr88g-source/vendor/github.com/gogo/protobuf/protobuf","FALSE" | |
EOF | |
# capture and decode 9095 as http2 | |
tshark -i any -d tcp.port==9095,http2 -Y grpc -V |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment