Wireshark · Ethereal-dev: Re: [Ethereal-dev] Print as XML - Status of work?

[Gilbert Ramirez <gram@xxxxxxxxxxxxxxx>]

Here's the PDML file. It does *not* work in Analyzer.

--gilbert

<?xml version="1.0"?>
<pdml>
<packet>
    <proto name="geninfo" pos="1" showname="General information" size="698">
      <field name="num" pos="1" show="1" showname="Number" value="1" size="698"/>
      <field name="len" pos="1" show="698" showname="Packet Length" value="2ba" size="698"/>
      <field name="caplen" pos="1" show="698" showname="Captured Length" value="2ba" size="698"/>
      <field name="timestamp" pos="1" show="Sep  1, 2003 08:03:43.836996000" showname="Captured Time" value="1062421423.836996000" size="698"/>
    </proto>
  <proto name="frame" showname="Frame 1 (698 bytes on wire, 698 bytes captured)" size="698" pos="0">
    <field name="frame.marked" size="0" pos="0" show="0"/>
    <field name="frame.time" size="0" pos="0" show="Sep  1, 2003 08:03:43.836996000"/>
    <field name="frame.time_delta" size="0" pos="0" show="0.000000000"/>
    <field name="frame.time_relative" size="0" pos="0" show="0.000000000"/>
    <field name="frame.number" size="0" pos="0" show="1"/>
    <field name="frame.pkt_len" showname="Packet Length: 698 bytes" size="0" pos="0" show="698"/>
    <field name="frame.cap_len" showname="Capture Length: 698 bytes" size="0" pos="0" show="698"/>
    <field name="frame.file_off" showname="File Offset: 40 (0x28)" size="0" pos="0" show="40"/>
  </proto>
  <proto name="eth" showname="Ethernet II, Src: 00:e0:81:00:b0:28, Dst: 00:09:6b:88:f5:c9" size="14" pos="0">
    <field name="eth.dst" size="6" pos="0" show="00:09:6b:88:f5:c9" value="00096b88f5c9"/>
    <field name="eth.src" size="6" pos="6" show="00:e0:81:00:b0:28" value="00e08100b028"/>
    <field name="eth.addr" size="6" pos="0" show="00:09:6b:88:f5:c9" value="00096b88f5c9"/>
    <field name="eth.addr" size="6" pos="6" show="00:e0:81:00:b0:28" value="00e08100b028"/>
    <field name="eth.type" size="2" pos="12" show="0x0800" value="0800"/>
  </proto>
  <proto name="ip" showname="Internet Protocol, Src Addr: 207.68.173.249 (207.68.173.249), Dst Addr: 10.0.0.5 (10.0.0.5)" size="20" pos="14">
    <field name="ip.version" size="1" pos="14" show="4" value="45"/>
    <field name="ip.hdr_len" showname="Header length: 20 bytes" size="1" pos="14" show="20" value="45"/>
    <field name="ip.dsfield" showname="Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP; ECN: 0x00)" size="1" pos="15" show="8" value="08">
      <field name="ip.dsfield.dscp" size="1" pos="15" show="0x02" value="08"/>
      <field name="ip.dsfield.ect" size="1" pos="15" show="0" value="08"/>
      <field name="ip.dsfield.ce" size="1" pos="15" show="0" value="08"/>
    </field>
    <field name="ip.len" size="2" pos="16" show="684" value="02ac"/>
    <field name="ip.id" showname="Identification: 0x0221 (545)" size="2" pos="18" show="0x0221" value="0221"/>
    <field name="ip.flags" size="1" pos="20" show="0x04" value="40">
      <field name="ip.flags.df" size="1" pos="20" show="1" value="40"/>
      <field name="ip.flags.mf" size="1" pos="20" show="0" value="40"/>
    </field>
    <field name="ip.frag_offset" size="2" pos="20" show="0" value="4000"/>
    <field name="ip.ttl" size="1" pos="22" show="46" value="2e"/>
    <field name="ip.proto" showname="Protocol: TCP (0x06)" size="1" pos="23" show="0x06" value="06"/>
    <field name="ip.checksum" showname="Header checksum: 0xc0e0 (correct)" size="2" pos="24" show="0xc0e0" value="c0e0"/>
    <field name="ip.src" size="4" pos="26" show="207.68.173.249" value="cf44adf9"/>
    <field name="ip.addr" size="4" pos="26" show="207.68.173.249" value="cf44adf9"/>
    <field name="ip.dst" size="4" pos="30" show="10.0.0.5" value="0a000005"/>
    <field name="ip.addr" size="4" pos="30" show="10.0.0.5" value="0a000005"/>
  </proto>
  <proto name="tcp" showname="Transmission Control Protocol, Src Port: 80 (80), Dst Port: 3195 (3195), Seq: 499624839, Ack: 2218238671, Len: 644" size="20" pos="34">
    <field name="tcp.srcport" showname="Source port: 80 (80)" size="2" pos="34" show="80" value="0050"/>
    <field name="tcp.dstport" showname="Destination port: 3195 (3195)" size="2" pos="36" show="3195" value="0c7b"/>
    <field name="tcp.port" size="2" pos="34" show="80" value="0050"/>
    <field name="tcp.port" size="2" pos="36" show="3195" value="0c7b"/>
    <field name="tcp.len" size="4" pos="34" show="644" value="00500c7b"/>
    <field name="tcp.seq" size="4" pos="38" show="499624839" value="1dc7ab87"/>
    <field name="tcp.nxtseq" size="0" pos="34" show="499625483"/>
    <field name="tcp.ack" size="4" pos="42" show="2218238671" value="8437a2cf"/>
    <field name="tcp.hdr_len" showname="Header length: 20 bytes" size="1" pos="46" show="20" value="50"/>
    <field name="tcp.flags" showname="Flags: 0x0018 (PSH, ACK)" size="1" pos="47" show="0x18" value="18">
      <field name="tcp.flags.cwr" size="1" pos="47" show="0" value="18"/>
      <field name="tcp.flags.ecn" size="1" pos="47" show="0" value="18"/>
      <field name="tcp.flags.urg" size="1" pos="47" show="0" value="18"/>
      <field name="tcp.flags.ack" size="1" pos="47" show="1" value="18"/>
      <field name="tcp.flags.push" size="1" pos="47" show="1" value="18"/>
      <field name="tcp.flags.reset" size="1" pos="47" show="0" value="18"/>
      <field name="tcp.flags.syn" size="1" pos="47" show="0" value="18"/>
      <field name="tcp.flags.fin" size="1" pos="47" show="0" value="18"/>
    </field>
    <field name="tcp.window_size" size="2" pos="48" show="17277" value="437d"/>
    <field name="tcp.checksum" showname="Checksum: 0x0380 (correct)" size="2" pos="50" show="0x0380" value="0380"/>
  </proto>
  <proto name="http" size="644" pos="54">
    <field show="HTTP/1.1 302 Object moved\r\n" size="27" pos="54" value="485454502f312e3120333032204f626a656374206d6f7665640d0a">
      <field name="http.response.code" size="3" pos="63" show="302" value="333032"/>
    </field>
    <field show="Server: Microsoft-IIS/5.0\r\n" size="27" pos="81" value="5365727665723a204d6963726f736f66742d4949532f352e300d0a"/>
    <field show="Date: Mon, 01 Sep 2003 13:03:43 GMT\r\n" size="37" pos="108" value="446174653a204d6f6e2c2030312053657020323030332031333a30333a343320474d540d0a"/>
    <field show="P3P: CP=&quot;BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo&quot;\r\n" size="55" pos="145" value="5033503a2043503d224255532043555220434f4e6f2046494e204956446f204f4e4c204f5552205048592053414d6f2054454c6f220d0a"/>
    <field show="Connection: close\r\n" size="19" pos="200" value="436f6e6e656374696f6e3a20636c6f73650d0a"/>
    <field show="Location: http://messenger.msn.com/tabs/tabxml.asp?Plcid=0409&amp;Version=4.7&amp;CLCID=0409&amp;BrandID=WindowsMessenger&amp;Country=US&amp;Other=\r\n"; size="129" pos="219" value="4c6f636174696f6e3a20687474703a2f2f6d657373656e6765722e6d736e2e636f6d2f746162732f746162786d6c2e6173703f506c6369643d303430392656657273696f6e3d342e3726434c4349443d30343039264272616e6449443d57696e646f77734d657373656e67657226436f756e7472793d5553264f746865723d0d0a"/>
    <field show="Content-Length: 238\r\n" size="21" pos="348" value="436f6e74656e742d4c656e6774683a203233380d0a"/>
    <field show="Content-Type: text/html\r\n" size="25" pos="369" value="436f6e74656e742d547970653a20746578742f68746d6c0d0a"/>
    <field show="Expires: Mon, 01 Sep 2003 13:03:43 GMT\r\n" size="40" pos="394" value="457870697265733a204d6f6e2c2030312053657020323030332031333a30333a343320474d540d0a"/>
    <field show="Cache-control: private\r\n" size="24" pos="434" value="43616368652d636f6e74726f6c3a20707269766174650d0a"/>
    <field show="\r\n" size="2" pos="458" value="0d0a"/>
    <field name="http.response" size="0" pos="54" show="1"/>
    <proto name="data" showname="Data (238 bytes)" size="238" pos="460">
      <field name="data.data" value="3c686561643e3c7469746c653e4f626a656374206d6f7665643c2f7469746c653e3c2f686561643e0a3c626f64793e3c68313e4f626a656374204d6f7665643c2f68313e54686973206f626a656374206d617920626520666f756e64203c6120485245463d22687474703a2f2f6d657373656e6765722e6d736e2e636f6d2f746162732f746162786d6c2e6173703f506c6369643d303430392656657273696f6e3d342e3726434c4349443d30343039264272616e6449443d57696e646f77734d657373656e67657226436f756e7472793d5553264f746865723d223e686572653c2f613e2e3c2f626f64793e0a"/>
    </proto>
  </proto>
</packet>


</pdml>