I have an Diameter protocol packet which carries inside an XML. XML is correctly identified and parsed by Wireshark.
However I am interested to dissect inside XML, for example: one XML field is some Base64 value and I would like to decode it to hex and show also this hex value in Wireshark. Any possible way to do this?
Only by adding code. There is hooks to dissect AVP contents in such a function you would have to parse the xml and decode the Base64 data and display it in the protocol tree. If it's a standard AVP described in a publically accessable document you could raise an enhancement bug request and attatch a sample trace file in the hope that someone might implement it.
It might also be possible to decode it in a Lua post-dissector while waiting for the enhancement to be implemented.
Comments