Wireshark-users: [Wireshark-users] Saving session in plain text
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: nnp <version5@xxxxxxxxx>
Date: Sun, 12 Nov 2006 19:07:07 +0000
Hi,
I have a captured SIP session that I wish to replay using a python
script of mine. I require the saved packed dump to be in the form

REGISTER sip:127.0.0.1 SIP/2.0
Via: SIP/2.0/UDP 127.0.0.1:5066;rport;branch=z9hG4bKecjlzkte
Max-Forwards: 70
To: "Bleh <101>" <sip:101@127.0.0.1>
From: "Blah <101>" <sip:101@127.0.0.1>;tag=gaerh
Call-ID: dchafnkgbzxaavm@127.0.0.1
CSeq: 396 REGISTER
Contact: <sip:101@127.0.0.1:5066>;expires=3600
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, REFER, NOTIFY, SUBSCRIBE
User-Agent: Bleh/0.4.2
Content-Length: 0

e.g plain text

I was wondering how I would go about getting ethereal to save the
session in this format. I could probably strip the libpcap headers
from each packet after I saved it but i'd prefer if there was an
easier way.

Thanks,
nnp

--
http://silenthack.co.uk