Tan Chee Leong wrote:
>
> Hi all,
>
> I've been having fun with ethereal esp while I was
> doing my CCNA, ethereal really helped me visually
> understand the world of TCP/IP.
>
> However, now there is a requirement which at the
> moment, perhaps due to my limited understanding, seems
> ethereal is unable to help me. I wish to analyze,
> say, OSPF packets. And out of these packets I want to
> extract some parameters for detailed analysis. I want
> to line these parameters in a table for further
> inspection.
>
> At the moment, ethereal can do the filtering, however,
> I have to look at the parameter of interest frame by
> frame. Is there anyway to specify the parameters
> within, and line them as a table?
>
> It seems I may not be able to avoid programming using
> libpcap to fulfill this requirement. Or have I missed
> out something? Appreciate your comments on this.
Ethereal currently has no way to do this, although
some generic facility for dumping fields would probably
be a useful addition to Ethereal.
My suggestion would be to dump out a full decode to
a text file (either with Ethereal "print to file", or
tethereal -V) and write some code to parse that file
and convert it to whatever format (CSV?) that you need.
--gilbert
