ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] Saving session in plain text

From: nnp <version5@xxxxxxxxx>
Date: Sun, 12 Nov 2006 19:07:07 +0000
Hi,
I have a captured SIP session that I wish to replay using a python
script of mine. I require the saved packed dump to be in the form

REGISTER sip:127.0.0.1 SIP/2.0
Via: SIP/2.0/UDP 127.0.0.1:5066;rport;branch=z9hG4bKecjlzkte
Max-Forwards: 70
To: "Bleh <101>" <sip:[email protected]>
From: "Blah <101>" <sip:[email protected]>;tag=gaerh
Call-ID: [email protected]
CSeq: 396 REGISTER
Contact: <sip:[email protected]:5066>;expires=3600
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, REFER, NOTIFY, SUBSCRIBE
User-Agent: Bleh/0.4.2
Content-Length: 0

e.g plain text

I was wondering how I would go about getting ethereal to save the
session in this format. I could probably strip the libpcap headers
from each packet after I saved it but i'd prefer if there was an
easier way.

Thanks,
nnp

--
http://silenthack.co.uk