Tshark - parameter posted as a JSON object

asked 2020-06-09 07:29:38 +0000

Sharpy gravatar image

For a Tshark class...It's the only challenge I have left to complete, I've been trying to find a solution all dang day. I have looked through at least 100 pages Tshark info without success, everything I find on JSON regards the export to JSON process.

I have a supplied .pcap file, need to find the answer using Tshark...can someone kick me in the right direction?

"Supply value 'sid' parameter being posted as JSON object to 'xyz.com/5/batches/71/AA/'?"

THANKS!!

edit retag flag offensive close merge delete

Comments

The link didn't take me to a capture file. Can you edit the question and fix the link?

Bob Jones gravatar imageBob Jones ( 2020-06-09 08:32:55 +0000 )edit
  1. Can you assume that "posted as" means it will be a POST request? If so look at those.
  2. Look for HTTP requests to xyz.com/5/batches/71/AA.
  3. Does "Supply value 'sid' parameter" mean a JSON object with a key of "sid" ? Maybe a string or Regex search for frames containing that text.
Chuckc gravatar imageChuckc ( 2020-06-09 14:57:48 +0000 )edit
add a comment