On Mon, Jul 14, 2008 at 02:04:29PM -0500, HT Levine wrote:
> i am relatively new to wireshark and I am looking to export things
> (like images) from .enc files. Is there an API for grabbing stuff
> like this (say I have an offset and length)? or do I need to reach
> into the C-code?
There is no such API at this time. However, there is a framework in
Wireshark to export "objects" from a protocol. Right now only HTTP is
supported (see File - Export - Objects - HTTP). See
gtk/export_object*.[ch] for more details on the implementation. Is
something like this what you are looking for?
Steve