ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] Wireshark as a hex viewer?

From: yami <yamisoe@xxxxxxxxx>
Date: Sat, 8 Nov 2008 21:56:04 +0800
Hi All,
 
I think Wireshark is a nice hex viewer as well as a packet analyzer, especially for those binary files which consist of several blocks, such as 'tar' format.
 
Editors which support editing hex file, usually only show binary files in two parts: hex numbers and ascii strings. But wireshark can also show a 'protocol tree' for such binary files.
 
 I've tried a prototype for this (by adding a new WTAP_FILE_ type, and WTAP_ENCAP_ type), it seems that it is very easy to implement the idea.
 
Any ideas?