Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Wireshark-users: [Wireshark-users] tshark showing null values in the generated pdml file

Date Index Thread Index Other Months All Mailing Lists

Date Prev Date Next Thread Prev Thread Next

From: "siri m" <svu004@xxxxxxxxx>
Date: Mon, 6 Oct 2008 18:12:33 -0700

Hi,

Currently, we are using tshark 0.99.6 to convert a SMPP capture file to pdml format using the following:

tshark –Tpdml –r capturefile.cap > sample.xml

The sample.xml contains null values for the show and value attributes as shown below:

However, if we use the tethereal (0.10.12) to parse the same capture file, it produces the following, which is what we want:

Also, I have noticed that if we open the same capturefile.cap in wireshark gui 0.99.6 contains the right show and value for the smpp.message as shown by tethereal 0.10.12.

Is it a known issue with tshark/pdml producing null values for show and value? Has anyone come across this issue? Any pointers would be quite helpful to me,

Thanks,

Follow-Ups:
- Re: [Wireshark-users] tshark showing null values in the generated pdml file
  - From: Bill Meier

Prev by Date: Re: [Wireshark-users] Unexplained Netbios Traffic
Next by Date: Re: [Wireshark-users] tshark showing null values in the generated pdml file
Previous by thread: Re: [Wireshark-users] Script/Macro to set time reference?
Next by thread: Re: [Wireshark-users] tshark showing null values in the generated pdml file
Index(es):
- Date
- Thread