A LUA script that enables complete NR 5GS (5G New Radio Service) message decoding in Wireshark
This LUA script enhances Wireshark's capabilities by providing full decoding support for NR 5GS protocol messages, making it easier to analyze and troubleshoot 5G network communications.
- Complete NR 5GS message decoding
- Easy integration with Wireshark
- Enhanced protocol analysis for 5G networks
- User-friendly implementation
For a comprehensive step-by-step installation tutorial, please watch our video guide:
📹 Watch Installation Tutorial on YouTube
- Download the LUA script from this repository
- Copy the script to your Wireshark plugins directory
- Restart Wireshark
- Enable the decoder in your protocol preferences
Detailed instructions are available in the video tutorial linked above
- Wireshark (version X.X or higher)
- Basic understanding of 5G NR protocols
- Administrative access to install plugins
Once installed, the decoder will automatically parse NR 5GS messages in your packet captures. Simply:
- Open your 5G packet capture file
- Apply relevant display filters
- View decoded NR 5GS messages in the packet details pane
If your PCAP contains LTE traffic that's not being decoded properly:
- Go to Analyze → Decode As...
- Find UDP port 4729 in the list
- In the "Current" column, change from GSMTAPv3 to GSMTAP
- Click OK to apply changes
This allows you to switch between GSMTAPv3 (for 5G) and GSMTAP (for 4G/LTE) decoding as needed.
If you find this tool helpful and would like to support its development, you can buy me a coffee!
Or scan the QR code below:
This project is licensed under the MIT License - see the LICENSE file for details.
Summary: You can use, modify, and distribute this code freely, just keep the original copyright notice.
- Thanks to all contributors and users
- Special thanks to the Wireshark community
⭐ If you find this project useful, please consider giving it a star!