Wireshark-dev: Re: [Wireshark-dev] Export higer level PDUs, "Unbundled PDUs" decrypted PDUs etc
From: vineeth vijay <[email protected]>
Date: Thu, 18 Apr 2013 21:41:03 +0530
Hi Anders,

Do you mean ability to export only the payload protocol from tunneled/encapsulated captures like GTP-U etc?
If yes, +1 :)

Have been looking for such functionality for some time.


On Thu, Apr 18, 2013 at 2:23 PM, Anders Broman <[email protected]> wrote:


I think these topics in various forms has been cropping up lately, would  it be possible/useful to have a generic feature to “Export” to a new file

From a dissector using a tap writing a to a generic DLT with a pseudo header containing pseudo data such as extracts from lover layers like IP port or whatever can be useful

and an Indication what the next level protocol is. As an example if I have decrypted and reassembled SIP traffic it could be useful to be able to export that to a new file

Just containing the SIP traffic and the IP port combination used. The header would then Indicate the protocol as SIP and the meta data would be of type TLV and added to as

Needs arises. Just a rough idea…




Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:[email protected]?subject=unsubscribe