Wireshark · Wireshark-dev: Re: [Wireshark-dev] Automatic test for a dissector DLL

[didier <dgautheron@xxxxxxxx>]

H,
Le lundi 13 décembre 2010 à 18:58 +0100, news.gmane.com a écrit :
> Hi,
> 
> I want to write a tester for my dissector. Since the procotol is complex it 
> is not sufficient, to load a captured file and verify visually the tree 
> output. I generated a set of synthetic capture files. Now the idea is to 
> instruct tshark to parse the file using the dissector and compare the output 
> with a predefined one.
> 
> To see my dissector's output I found only the -V option. This could be used 
> in that way:
> 
> tshark -V -r sample_file.pcap
> 
> Unfortunately I get the whole tree. I failed to specify that only my 
> dissector's output is reported.
> 
> How can I limit the output to one protocol level. As an example the TCP 
> level would be great (without IP, Ethernet, Frame)?
tshark -T pdml -r file.pcap
and filter the xml output ?

Didier