Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Automatic test for a dissector DLL

From: didier <dgautheron@xxxxxxxx>
Date: Mon, 13 Dec 2010 23:52:07 +0100
H,
Le lundi 13 dᅵcembre 2010 ᅵ 18:58 +0100, news.gmane.com a ᅵcrit :
> Hi,
> 
> I want to write a tester for my dissector. Since the procotol is complex it 
> is not sufficient, to load a captured file and verify visually the tree 
> output. I generated a set of synthetic capture files. Now the idea is to 
> instruct tshark to parse the file using the dissector and compare the output 
> with a predefined one.
> 
> To see my dissector's output I found only the -V option. This could be used 
> in that way:
> 
> tshark -V -r sample_file.pcap
> 
> Unfortunately I get the whole tree. I failed to specify that only my 
> dissector's output is reported.
> 
> How can I limit the output to one protocol level. As an example the TCP 
> level would be great (without IP, Ethernet, Frame)?
tshark -T pdml -r file.pcap
and filter the xml output ?

Didier