Wireshark-dev: Re: [Wireshark-dev] Importing raw application protocol data with Wireshark
From: Ahmad Fatoum <[email protected]>
Date: Thu, 14 Sep 2017 13:35:27 +0200
There is "Import from Hexdump" in the File menu, which can prefix headers, create a pcap and open it in Wireshark.
It's also usable from the command line with the text2pcap utility.

I also had success with Net::PcapWriter from CPAN in the past.


> On 14Sep 2017, at 13:28, Jack Guest <[email protected]> wrote:
> Hi,
> Is there any straightforward way of importing from a file
> application-layer protocol data that lacks transport headers (i.e
> lacks link-layer, internet-layer and transport-layer headers) in order
> to be able to use an existing Wireshark protocol dissector to view and
> analyze the application protocol raw data?
> If not, what would it take to add such feature to Wireshark or the other tools?
> Thanks,
> Jack
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <[email protected]>
> Archives:    https://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
>             mailto:[email protected]?subject=unsubscribe