Re: How to display identical fields with tshark

[Martin Visser <martinvisser99 () gmail com>]

PDML is a just an XML format of the packet dissection. I don't know of
anything formal - I have previously just parsed it using some pretty
basic Perl or Python

Regards, Martin

MartinVisser99 () gmail com



On 7 January 2011 06:59, eymanm <eymanm () gmail com> wrote:
> Martin,
> Can you elaborate a bit on the PDML approach. Is there a mechanism within
> WireShark to deal with the PDML? Or the XSLT is the way to go? Can you point
> to any documentation?
> Thanks
> On Wed, Jan 5, 2011 at 6:11 PM, Martin Visser <martinvisser99 () gmail com>
> wrote:
> > Also as an interim measure, you may want to make use of the PDML
> > output instead (which will show all fields). This will require
> > separate parsing of course to be useful.
> >
> > Regards, Martin
> >
> > MartinVisser99 () gmail com
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request () wireshark org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe