[Suggestion] socat to text2pcap

asked 2020-11-11 09:37:19 +0000

le_top gravatar image

I was looking for a way to replay socat logs, and to see them in the wireshark interface where they could even be decoded if a dissector would be written.

So I found 'text2pcap' that can already convert hexdumps, but not timestamped socat logs AFAIKS.

'socat' already groups serial communication pretty efficiently in packets.

'socat' combined with 'text2pcap' (and disectors) and wireshark would be be a powerfull combination for serial protocols in general.

edit retag flag offensive close merge delete

Comments

The Wireshark extcap interface has been designed for this. It allows external processes to acquire data and then feed that data into Wireshark.

An extcap utility that runs socat would be an interesting project for someone.

grahamb gravatar imagegrahamb ( 2020-11-11 09:47:49 +0000 )edit

As text2pcap already exists and does hex conversion, I thought that making that compatible would do the jobs.

I do not know if text2pcap could also handle the conversion of a realtime stream.

le_top gravatar imagele_top ( 2020-11-12 17:36:42 +0000 )edit