Wireshark mailing list archives

Re: Collection of captures for each supported dissector?


From: Evan Huus <eapache () gmail com>
Date: Mon, 30 Jun 2014 07:12:56 -0400

The "menagerie" is our collection of capture files that the fuzz-bot uses to test with. It contains a substantial 
number of files across as many protocols as we have been able to accumulate. However, I am not sure it is entirely 
publicly accessible?

Additionally, it is not indexed. There is a script somewhere to use tshark to extract the protocols contained in each 
capture and build a list, but it only works for protocols which are dissectible by default (no "decode as", decryption, 
or other special settings usually).

One of the ideas floated at sharkfest this year was the possibility of a proper interface to the menagerie, but I don't 
think anything really came of it. What protocol are you interested in right now?

On Jun 30, 2014, at 5:40, Peter Wu <peter () lekensteyn nl> wrote:

Hi,

Is there an accessible list of capture files for each supported
dissector? I would like to make some changes w.r.t. reassembly, but
want to be sure not to introduce regressions. SampleCaptures contains
a list of captures, but these are not complete and are not grouped
per dissector.

What I am looking for are captures that exercise the normal cases and
boundaries of a dissector. Also known as a torture test.

A dissector may have multiple captures for different situations, but it
should not be too large (100 MiB is large). The "regression test" is
then performed with a diff against the output of tshark.

Does anyone known such a list?

Kind regards,
Peter
https://lekensteyn.nl
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: