Wireshark-bugs: [Wireshark-bugs] [Bug 11750] tshark saves raw stream in ascii file, content unre
Date: Sat, 28 Nov 2015 16:42:06 +0000

changed bug 11750


What Removed Added
Status UNCONFIRMED RESOLVED
CC   peter@lekensteyn.nl
Resolution --- WORKSFORME

Comment # 1 on bug 11750 from
grep -E '^\s*[0-9a-f]' dump_150927_1848_g0n_s00009.bin | xxd -ps -r > real.bin

Works for me, I see a HTTP request/response.

    tshark -r dump_150927_1848_g0n.pcap -qz follow,tcp,raw,1 |
        grep -E '^\s*[0-9a-f]' | xxd -ps -r

Please re-open if you feel there is still a bug. I tested it with the following
version:
--
TShark (Wireshark) 2.1.0 (v2.1.0rc0-826-g40b2831 from master)

Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with libpcap, with POSIX capabilities (Linux), with libnl 3,
with libz 1.2.8, with GLib 2.46.2, without SMI, without c-ares, without ADNS,
with Lua 5.2, with GnuTLS 3.4.6, with Gcrypt 1.6.4, with MIT Kerberos, with
GeoIP.

Running on Linux 4.3.0-1-ARCH, with locale en_GB.UTF-8, with libpcap version
1.7.4, with libz 1.2.8, with GnuTLS 3.4.6, with Gcrypt 1.6.4.
Intel(R) Core(TM) i5 CPU       M 560  @ 2.67GHz (with SSE4.2)

Built using clang 4.2.1 Compatible Clang 3.7.0 (tags/RELEASE_370/final).


You are receiving this mail because:
  • You are watching all bug changes.