e:
Did you take a look at tshark's -T parameter? "tshark -T jsonraw" for instance,
delivers full dissection in Json format. What would be needed is only to shove
that into a pipe to capture from some other place.
Cheers
Roland
On Tue, Jul 11, 2017 at 2:48 PM, Mark Landr
Apologies in advance if this question is a bit long-ish.I've
been wondering why Wireshark/tshark doesn't offer the option to export full
packet dissection data via named pipe (serialized binary data). Is this due to
design philosophy, lack of offers to write the code, or some other reason? Of
Using -T with pdml/psml would probably be the best approach if you want text
output. However, if that doesn't work for you, then you could consider doing
what some programs like SCAPY do. Save your packets in a temp pcap file and
pass the file name to your tshark child process when you are spawn
reshark code been terribly onerous?
Regards,
Mark
- Original Message -
From: Eloy Paris
Date: Thursday, August 19, 2010 1:54 pm
Subject: Re: [Wireshark-dev] libtshark + scripting language support
To: wireshark-dev@wireshark.org
> Hi Mark,
>
> On 08/19/2010 09:02 AM, Mark Landri
ly its possibilities. I have worked a bit
> on this kind of use so I would be glad to give help and comments if
> you opened such a project.
>
> Best regards.
>
>
> -Original Message-
> From: wireshark-dev-boun...@wireshark.org [ On Behalf Of Mark Landriscina
>
arkPY with code from a project named
Scapy (not my code) to do similar things.
> Hi Mark,
>
> On 08/18/2010 01:34 PM, Mark Landriscina wrote:
>
> [...]
>
> > My motivation was that I wanted to do some work with Scapy and needed
> > to access application layer prot
ject line so it is more specific
> than "Re: Contents of Wireshark-dev digest..."
>
>
> Today's Topics:
>
>1. Wiki weirdness? (Jeff Morriss)
>2. Re: Wiki weirdness? (Bill Meier)
>3. Re: Wiki weirdness? (Gerald Combs)
>4. libtshark + scripting
Hi,
I'd like to contribute some work that I've done to the wireshark community and
need some advice on the best way to do this, assuming there is interest. If
not, that would be good to know as well. I suspect that it might be best to
fork this off as a separate project vs. incorporating it dir
All:
I've written a C-based python extension module to dissect packets using
wireshark's/tshark's dissection routines. The module has a function that reads
packets sequentially from a capture file, dissects them, and then returns a
python object containing all the data.
Works great with one ex
Hi all:
I need the ability to serialize/deserialize the dissection tree
(epan_dissect_t) filled in by epan_dissect_run.
Is this functionality already available, or is this something that I will have
to write myself?
Regards,
Mark
___
Wireshark-dev m
10 matches
Mail list logo
