Ask Your Question
0

Save packet data as hex string

asked 2018-05-31 09:52:37 +0000

Hello,

I have a few CFLOW (netflow v9) packets that I'd like to refeed using a python script. Specifically this python script.

How exactly do I export the packet data as a hex string? I tried to right click > copy > ... as hex stream. But that gives me the data in ...0009000c01f200f25b0fa... format and not in ...\x00\t\x00\x15e\x9c\ ... format. Is this possible? Kindly advice.

Thanks.

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted
0

answered 2018-05-31 10:15:41 +0000

grahamb gravatar image

Try using the "...as Escaped String" option of Copy.

edit flag offensive delete link more

Comments

I tried that but unfortunately that doesn't seem to work with the script. The script basically replays the data to 2055 where my logshtash instance is running. If I feed it the escaped string data, logstash complains stating that the data received is incorrect. Also, there is a difference in formatting between what is present in the script vs what is being generated by "as escaped string" - something which I'm not able to figure our at the moment

blueren gravatar imageblueren ( 2018-05-31 10:18:57 +0000 )edit

Those are the only hex formats supported by Wireshark, you'll probably have to adjust the script to handle the input you give it.

grahamb gravatar imagegrahamb ( 2018-05-31 10:28:03 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-05-31 09:52:37 +0000

Seen: 73 times

Last updated: May 31