GitHub - tomer8007/mtproto-dissector: Wireshark plugin for dissecting the Telegram protocol

Wireshark dissector for Telegram traffic using MTProto 2.0 protocol. Supports de-obfuscation, decryption with auth key, and TL language RPC payload dissection. Installation requires luagcrypt bindings and copying the mtproto directory to Wireshark’s plugins directory.

Edward Kiledjian @ekiledjian