Wireshark mailing list archives

Re: Should the "export as text" item be in an "Export Human-readable..." item in the File menu?


From: Sake Blok <sake () euronet nl>
Date: Tue, 10 Apr 2012 08:53:18 +0200

On 9 apr 2012, at 17:31, Jaap Keuter wrote:

On 04/07/2012 06:05 AM, Guy Harris wrote:
The mistake that caused this question to be asked:

     http://ask.wireshark.org/questions/10000/how-to-get-the-txt-file-back-to-wireshark

might be due to people thinking that the result of an "Export" operation is something that contains the raw data 
from the packets and thus can be read into Wireshark.  (The question itself appears to have hoped that, even if it 
couldn't be read into Wireshark, it still contained the raw data, which, in this case, it didn't.)

Perhaps we should put the Export menu items for "as text" and "as PostScript" under a top-level menu item that more 
clearly indicates that the result of the operation will not be readable by Wireshark and can't necessarily even be 
converted into something readable by Wireshark?

The same applies for the "export as CSV" and "export as XML" operations; those aren't easily human-readable, but 
they're written in a form intended for programs *NOT* interested in the raw packet data (and not equipped to parse 
raw packet data) to process.

I can see the "Export / Import complementary" line of thinking (maybe I shouldn't have  created the Import...)

Nope, the import is definitely nice to have :-)

. Anyways, this cannot end up in yet another top level menu, it's just not that sort of thing, it is a "File" 
operation.
What could be done (and it already looks like it on !Windows, if I'm correct) is make it Print option. A print 
operation is less likely to be confused with something that can be re-imported (barring the guy feeding the printed 
output into the office printer/scanner to get PDFs, using OCR to get the text out, then trying to import this text).

How about making the default export options include all packet data and make sure the import function will then 
properly re-create the capture by reading the timestamps and parsing the hex data. That way export data will indeed be 
possible to import, unless someone fiddles with the default settings, but then he has only himself to blame :-)

I think people do not expect a .CSV or postscipt file to be re-importable, so we should be safe there....

Cheers,
Sake

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: