Wireshark-bugs: [Wireshark-bugs] [Bug 8279] Add support for Android Logcat logs, text files and
Comment # 20
on bug 8279
from Guy Harris
(In reply to comment #19)
> (In reply to comment #16)
> > (In reply to comment #6)
> > Aren't there already hex file viewers out there? Why must Wireshark expand
> > to the point where it can handle *arbitrary* files? Shall we next add
> > support for, say, Word documents, so that it can act as a Word document
> > reader?
>
>
> > > Also we can use Wireshark as text viewer
> >
> > We can also use vi and emacs as text viewers; why do we need Wireshark to be
> > able to do it?
>
>
> In future Wireshark will support everything, wont't it?
I certainly hope it won't.
> Now supported are PNG, JPG, XML...
Those, at least, are commonly transmitted in, for example, HTTP requests and
responses, so I'm willing to accept the graphic formats. XML is used as an
encoding for protocols, so I view it as similar to, for example, ASN.1 BER and
PER in that regard (and I think there's an XML encoding of ASN.1).
However:
> Hmm... Add Word dissector can be interested for
> Open/LibreOffice teams and other developers :)
I'd *really* be inclined to draw the line there.
> Hex view can be useful for:
> 1. Decode as... feature (see below example)
That's not "Wireshark as hex editor", that's "we support decoding XXX because
it's something that goes over the network, so also support reading XXX when
it's in a file", which we do for some file formats.
> 2. See why Wireshark does not open file which should - broken files. Don't
> you ever try to open broken log/dump file?
That's what hex viewers and editors are for. Wireshark won't do a better job
of handling that case than a hex viewer (unless you throw debugging code into
the *Wiretap* module for the file format you're trying to read).
> What about text-based interfaces? For example Bluetooth HFP is next text
> protocol over RFCOMM. I want to open this text file in Wireshark, than
> Decode as HFP.
Can HFP can be recognized heuristically? If so, write a Wiretap module that
does so, and add a WTAP_ENCAP_HFP encapsulation. You won't even need "Decode
as HFP" to do that.
> To be sure: "Android" patch does not require "text" patch, so can be applied
> first. On the other side, Android very like text files contain "logcat"
> logs, so why does not open it too?
If there's a text representation of logcat, write a Wiretap module for it.
You are receiving this mail because:
- You are watching all bug changes.
