How to read hexdump with tshark without create file

asked 2021-01-04 13:09:08 +0000

learningnew
5 ●1 ●3 ●3

Hi, I have a hexdump that I want to read with tshark, but I don't want to use text2pcap becuase it saves it to the disk... How can I read directly hexdump with tshark without convert it to pcap or convert it without saving it in the disk? Thanks

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2021-01-04 14:58:14 +0000

learningnew
5 ●1 ●3 ●3

I used pyshark wrap with InMemCapture

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-01-04 13:09:08 +0000

Seen: 218 times

Last updated: Jan 04 '21

How to read hexdump with tshark without create file edit

1 Answer