Wireshark mailing list archives

Re: Importing raw application protocol data with Wireshark


From: Ahmad Fatoum <ahmad () a3f at>
Date: Thu, 14 Sep 2017 13:35:27 +0200

There is "Import from Hexdump" in the File menu, which can prefix headers, create a pcap and open it in Wireshark.
It's also usable from the command line with the text2pcap utility.

I also had success with Net::PcapWriter from CPAN in the past.

Regards,
Ahmad

On 14Sep 2017, at 13:28, Jack Guest <anonimusul () gmail com> wrote:

Hi,

Is there any straightforward way of importing from a file
application-layer protocol data that lacks transport headers (i.e
lacks link-layer, internet-layer and transport-layer headers) in order
to be able to use an existing Wireshark protocol dissector to view and
analyze the application protocol raw data?


If not, what would it take to add such feature to Wireshark or the other tools?

Thanks,
Jack
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: