JSON duplicated keys in Wireshark Windows
Hello,
I'm trying to export some packets from a Wireshark capture to JSON format in Windows.
In this case, I'm getting the key "tls" duplied in the JSON file (from a packet that has several TLS informations). As you might have heard (from RFC 8259):
An object structure is represented as a pair of curly brackets surrounding zero or more name/value pairs (or members). A name is a string. A single colon comes after each name, separating the name from the value. A single comma separates a value from a following name. The names within an object SHOULD be unique.
The rule speaks just about a recommendation, and as I have read, in tshark we do have the option to use --no-duplicate-keys. But, is there any option to use it on Windows GUI?
I'm using 3.6.1 (v3.6.1-0-ga0a473c7c1ba). Capture and JSON export is available at https://mega.nz/file/AnRxmQ5R#xpGvVue...
Thank you.
You can post captures on a public share and then edit your question with a link to the capture.
@grahamb done, thanks!
Does tshark
--no-duplicate-keys
give the output you're looking for? If that style output was available from the Wireshark gui (set as a preference or export checkbox) sufficient?@Chuckc Yes, it is was exactly what I was looking for.
Whatever, I already solved it by my own (changing my Python code) this way:
However I think it could be an useful function to be added. Thanks!