Save packet data as hex string

asked 2018-05-31 09:52:37 +0000

blueren
1 ●1 ●2 ●1

Hello,

I have a few CFLOW (netflow v9) packets that I'd like to refeed using a python script. Specifically this python script.

How exactly do I export the packet data as a hex string? I tried to right click > copy > ... as hex stream. But that gives me the data in ...0009000c01f200f25b0fa... format and not in ...\x00\t\x00\x15e\x9c\ ... format. Is this possible? Kindly advice.

Thanks.

answered 2018-05-31 10:15:41 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●973 ●227 https://www.wireshark.org

Try using the "...as Escaped String" option of Copy.

edit flag offensive delete link

Comments

I tried that but unfortunately that doesn't seem to work with the script. The script basically replays the data to 2055 where my logshtash instance is running. If I feed it the escaped string data, logstash complains stating that the data received is incorrect. Also, there is a difference in formatting between what is present in the script vs what is being generated by "as escaped string" - something which I'm not able to figure our at the moment

blueren ( 2018-05-31 10:18:57 +0000 )edit

Those are the only hex formats supported by Wireshark, you'll probably have to adjust the script to handle the input you give it.

grahamb ( 2018-05-31 10:28:03 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Save packet data as hex string

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Save packet data as hex string edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Save packet data as hex string