Ask Your Question
0

How to dissect inside xml?

asked 2020-06-12 08:07:12 +0000

Dragos gravatar image

I have an Diameter protocol packet which carries inside an XML. XML is correctly identified and parsed by Wireshark.

However I am interested to dissect inside XML, for example: one XML field is some Base64 value and I would like to decode it to hex and show also this hex value in Wireshark. Any possible way to do this?

edit retag flag offensive close merge delete
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-06-12 11:07:52 +0000

Anders gravatar image

Only by adding code. There is hooks to dissect AVP contents in such a function you would have to parse the xml and decode the Base64 data and display it in the protocol tree. If it's a standard AVP described in a publically accessable document you could raise an enhancement bug request and attatch a sample trace file in the hope that someone might implement it.

edit flag offensive delete link more

Comments

It might also be possible to decode it in a Lua post-dissector while waiting for the enhancement to be implemented.

cmaynard gravatar imagecmaynard ( 2020-06-15 15:32:42 +0000 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2020-06-12 08:07:12 +0000

Seen: 693 times

Last updated: Jun 12 '20

Related questions

how to extract whole xml structure from soap envelope using tshark?

Is there a limit on the size of a xml file (containing 3gpp trace) that can be loaded on wireshark?

Any examples of a LUA script for XML?

Citrix XenApp 7.x XML Services Errors - Resolved after Installing Wireshark

Custom vendor-specific diameter dictionary xml

Wireshark - Reassembling TCP streams with large XML in payload (multiple TCP packets)