Wireshark · Wireshark-dev: Re: [Wireshark-dev] Human Readable and Reversible (XML output?)

["Marc Milgram" <ethereal@xxxxxxxxxxxxxxxxxxxxxxx>]

On Tue, 14 Nov 2006 12:19:43 -0800, "frap puccino" <frapp3@xxxxxxxxxxx>
said:
> I work for the Navy and because some of our lab captures are done in a 
> secret/classified environment, in order to remove the traces from the
> lab, 
> we need to make them human readable to ensure to security officials that 
> there isn't secret data hidden in the traces.  Although we could provide 
> "tcpdump -w" output, the problem we have is that we'd still like to be
> able 
> to use analyzer tools that require libpcap format data after the data
> leaves 
> the secret/classified lab.  So we are looking into ways to translate
> libpcap 
> binary outputs to readable text then back to libpcap binary format.
> 
> We were hoping someone has already written a utility that would translate 
> libpcap output into something human readable, such as xml, and perhaps
> there 
> would then be a capability to translate it back to libpcap format too. 
> If 
> anyone has heard about something out there that does this, please let us 
> know.
> 
> Any feedback on other ideas to make this work would be appreciated.

To find ascii strings in binary files, I use the "strings" command.
It works on any file (binary or not).

-Marc