Wireshark-dev: Re: [Wireshark-dev] Command Line API available?
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Sat, 19 Jul 2008 22:03:02 -0600
On Mon, Jul 14, 2008 at 02:04:29PM -0500, HT Levine wrote:

> i am relatively new to wireshark and I am looking to export things 
> (like images) from .enc files.  Is there an API for grabbing stuff 
> like this (say I have an offset and length)?  or do I need to reach 
> into the C-code?

There is no such API at this time.  However, there is a framework in 
Wireshark to export "objects" from a protocol.  Right now only HTTP is 
supported (see File - Export - Objects - HTTP).  See 
gtk/export_object*.[ch] for more details on the implementation.  Is 
something like this what you are looking for?


Steve