Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] Wireshark as a hex viewer?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: yami <yamisoe@xxxxxxxxx>
Date: Sat, 8 Nov 2008 21:56:04 +0800

Hi All,
 
I think Wireshark is a nice hex viewer as well as a packet analyzer, especially for those binary files which consist of several blocks, such as 'tar' format.
 
Editors which support editing hex file, usually only show binary files in two parts: hex numbers and ascii strings. But wireshark can also show a 'protocol tree' for such binary files.
 
 I've tried a prototype for this (by adding a new WTAP_FILE_ type, and WTAP_ENCAP_ type), it seems that it is very easy to implement the idea.
 
Any ideas?
  • Follow-Ups:
    • Re: [Wireshark-dev] Wireshark as a hex viewer?
      • From: Jaap Keuter
  • Prev by Date: Re: [Wireshark-dev] custom plugin dll - can it be dropped intoanother WS installation?
  • Next by Date: Re: [Wireshark-dev] Wireshark as a hex viewer?
  • Previous by thread: Re: [Wireshark-dev] Dissectors and parsing mode
  • Next by thread: Re: [Wireshark-dev] Wireshark as a hex viewer?
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation