Wireshark-dev: Re: [Wireshark-dev] Dissector - Read data from file

From: Reinhard Speyerer <rspmn@xxxxxxxx>
Date: Tue, 03 Jun 2008 22:58:48 +0200

Hans Glück wrote:
> Hello,
> 
> thanks for all the hints. I looked into the code of text2pcap and this is a wonderful fundament to get my own pcap-creator program started. I have to think about whether I´ll use Java (parsing XML is in Java easier), C (perfect if I´ll implement my new capture file in ws) or Python (but I am not familiar with Python) to write this program.
> Can I parse in Wireshark through XML? I found this: http://wiki.wireshark.org/XML, but I do not think that this is a solution for my parsing problem?
> Regards,
> Chris

Hi Chris,

just use a shell command like
$ for f in /tmp/test*.xml; do od -Ax -tx1 -v $f; done | text2pcap -l 151 - /tmp/test.pcap
after you have set the payload_proto of USER DLT 4 (= 151) via Preferences -> Protocols
-> DLT User to xml and check whether the result in Wireshark suits your XML parsing
requirements.

Regards,
Reinhard