First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Follow a stream, saving to file not consistent, intended or not?

  • retag add tags

After selecting the menu option to Follow a UDP stream, I noticed something when selecting to display the data (as ASCII, Hex Dump or Raw) and then saving to a file.

1.) When 'ASCII' is selected and then saved, as expected, the file will contain what is shown in the follow dialog.

2.) When 'Hex Dump' is selected and then saved, as expected, the file will contain what is shown in the follow dialog.

3.) But when 'Raw' is selected and then saved, the file will NOT contain what is shown in the follow dialog. The file contains the actual raw bytes exactly as taken from the wire. It is a binary file and not a file which contains human readable hex byte characters (as displayed on dialog).

Is this the intended behavior for saving in Raw format?

I'm happy with its behavior and this is exactly what I need but it doesn't conform to other display behaviors. I don't want to rely on something that will be corrected in a later release.

Thanks

Danno's avatar
1
Danno
asked 2021-12-01 16:50:49 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

From the Wireshark User’s Guide (Following Protocol Streams):

"Raw

This allows you to load the unaltered stream data into a different program for further examination. The display will look the same as the ASCII setting, but “Save As” will result in a binary file."

Chuckc's avatar
3k
Chuckc
answered 2021-12-01 17:27:53 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer