Wireshark-dev: Re: [Wireshark-dev] Processing packet before exporting it.
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: João Valverde <joao.valverde@xxxxxxxxxxxxxxxxxx>
Date: Fri, 24 Nov 2017 00:14:11 +0000


On 22-11-2017 17:02, Pascal Quantin wrote:
Le 22 nov. 2017 17:36, "Dario Lombardo" <dario.lombardo.ml@xxxxxxxxx <mailto:dario.lombardo.ml@xxxxxxxxx>> a écrit : 

    On Wed, Nov 22, 2017 at 5:21 PM, Manik Khandelwal
    <manik123khandelwal@xxxxxxxxx <mailto:manik123khandelwal@xxxxxxxxx>>
    wrote:

        I want to edit the bytes with full knowledge of structure.


    There was such a feature in wireshark GTK gui. It has not been
    ported to QT yet and there are no plans at the moment for that.
    Maybe you could try to compile it or use some bin package that
    provide the old gui and play a little bit with it. For the sake of
    completeness: it's just a bit more than an hex editor, by the way.
    But points to the actual packet bytes, that makes some of the job
    you should do yourself with an hex editor.
    Hope it helps.
There was indeed an experimental packet editor, but it was very limited (basically as far as I can remember it could edit values like what you could do with an hex editor, but was not a generic encoder for any given protocol). 



Change proposing removal: https://code.wireshark.org/review/#/c/24563