Decoding data in HTTP2 as JSON

asked 2021-03-12 13:13:21 +0000

dandreye gravatar image

updated 2021-03-12 13:17:55 +0000

Hi All,

Is there a way to make Wireshark always decode the DATA section in all HTTP2 packets as JSON w/o right clicking on a packet from yet another IP:tcpport stream to be treated and manually doing Decode As... for it? This is for 5G SBI/SBA testing/troubleshooting activities.

Many thanks in advance!

edit retag flag offensive close merge delete

Comments

Do you have a sample capture to share?

Chuckc gravatar imageChuckc ( 2021-03-12 23:12:36 +0000 )edit

Sure: https://drive.google.com/file/d/1CVu2... (btw it won't dissect JSON in HTTP2 for some reason even when explicitly specified via Decode As)

dandreye gravatar imagedandreye ( 2021-03-12 23:25:09 +0000 )edit

The single packet in the capture is not recognized as HTTP2. Need more of the earlier packets in the stream as was mentioned here.

Chuckc gravatar imageChuckc ( 2021-03-13 01:27:14 +0000 )edit

@Chuckc: thank you: looks like that's exactly what's missing even in my entire trace, so I'll need to see how to start it early enough to capture that critical piece of data if I got it right.

dandreye gravatar imagedandreye ( 2021-03-15 14:25:03 +0000 )edit
add a comment