DVRIP/Sofia Protocol Dissector for Wireshark (Written in Lua)

A detailed walkthrough of a custom Wireshark protocol dissector written in Lua for the DVRIP/Sofia proprietary protocol used in Xiongmai-based IP cameras. Covers the 20-bit message header structure, JSON payload parsing, five distinct media frame types (I-Frame, P-Frame, Audio, Image, Information), and a feature to reconstruct audio and video streams from .pcap files for external muxing with ffmpeg. The dissector was developed as part of a security assessment of a cheap Chinese IP camera (Besder 6024PB-XMA501).