ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] Why my pdml outputed is not like that PDML Specification

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Tue, 22 Jun 2004 06:58:25 +0200
Li Haijiang wrote:

Hi I use the command of "tethereal -T pdml -r infile > output.pdml".I find the
struct of the output is like this:
----------------------
<?xml version="1.0"?>
<psml version="0" creator="ethereal/0.10.4">
<structure>
<section>No.</section>
<section>Time</section>
<section>Source</section>
<section>Destination</section>
<section>Protocol</section>
<section>Info</section>
</structure>

<packet>
<section>1</section>
<section>16:19:01.352704</section>
<section>178.100.101.106</section>
<section>61.172.247.210</section>
<section>TCP</section>
<section>4021 &gt; 7200 [PSH, ACK] Seq=3139853647 Ack=2603158059 Win=16164
Len=19</section>
</packet>

<packet>
<section>2</section>
<section>16:19:01.383611</section>
<section>61.172.247.210</section>
<section>178.100.101.106</section>
<section>TCP</section>
<section>7200 &gt; 4021 [PSH, ACK] Seq=2603158059 Ack=3139853666 Win=65032
Len=40</section>
</packet>
---------------------
That is not like the pdml specification ----http://analyzer.polito.it/30alpha/docs/dissectors/PDMLSpec.htm
My output pdml file is the summary of the packet and not describe the detail of
the packet.So I can't get the data info in the packet and can get only the length
of the data in the packet.Is it right?If I want to get the data in packet how can
I to do ??
Thanks..



Strange! You are getting the psml (packet summary markup language) output, not the pdml (packet details markup language) output.

That might be a bug in the Ethereal version you are using. Do you use the latest (0.10.4) version?

With the current CVS (very latest developer) version, this seems to be working fine, I've tried it.

Regards, ULFL