http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2185
Summary: tshark PDML output is not well formed (unmatched
</proto>)
Product: Wireshark
Version: 0.99.7
Platform: All
OS/Version: All
Status: NEW
Severity: Major
Priority: Low
Component: TShark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: paul.blankenbaker@xxxxxxxxxx
CC: rwhalb@xxxxxxxxxxxx
Build Information:
TShark 0.99.7
Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GLib 2.14.4, with libpcap 0.9.7, with libz 1.2.3, with libpcre
7.3, without SMI, without ADNS, without Lua, with GnuTLS 1.6.3, with Gcrypt
1.2.4, without Kerberos.
Running on Linux 2.6.23.8-63.fc8, with libpcap version 0.9.7.
Built using gcc 4.1.2 20070925 (Red Hat 4.1.2-33).
Here's the output from a Windows:
D:\Program Files\Wireshark>tshark -v
Could not open file: 'Ericsson.xml', error: No such file or directory
TShark 0.99.7 (SVN Rev 23910)
Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GLib 2.14.3, with WinPcap (version unknown), with libz 1.2.3,
with
libpcre 6.4, with SMI 0.4.5, with ADNS, with Lua 5.1, with GnuTLS 1.6.1, with
Gcrypt 1.2.3, with MIT Kerberos.
Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5.
Built using Microsoft Visual C++ 6.0 build 8804
--
tshark is including a unmatched "</proto>" string in the XML output when the
"-T pdml" option is specified.
This problem appears in version 0.99.7 on both Fedora 8 version, a custom build
from source (also under Fedora 8), and the Windows binary or 0.99.7.
Run the following command against the attached capture file (contains a single
packet):
tshark -t r -n -r capture.cap -T pdml > capture.pdml
You will find a unmatched "</proto>" near the bottom of the output.
You can verify that the PDML output is not syntactically correct by attempting
to load it with Firefox, or using the following command:
[pkb@rice tmp]$ xmllint --noout capture.pdml
/tmp/capture.pdml:94: parser error : Opening and ending tag mismatch: packet
line 3 and proto
</proto>
^
/tmp/capture.pdml:95: parser error : Opening and ending tag mismatch: pdml line
2 and packet
</packet>
^
/tmp/capture.pdml:98: parser error : Extra content at the end of the document
</pdml>
^
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.