Hello,
I have some queries regarding XML data dissection
in Wireshark.
Right now all the protocols in Wireshark can be
dissected using "pcap" files.
Now I have a requirement to use XML data to dissect some of the(ranap, mtp3
etc..) Wireshark protocols. after doing some investigation, I found that in
order to dissect xml data, separate dtd files need to be written for all the
required plug-ins. Which are similar to the files in “dtds” directory in
Wireshark source code. Once after that I have to integrate the dtd files into
wireshark code so as to make them to dissect XML data. now the following are my
queries.
1. How to write a DTD file for a protocol? (is there any standard format
for that? if so, can any one please let me know?)
2. Once after writing the DTD file, how to integrate the file into
wireshark base code? (is the normal source code compilation is enough? I don’t
think it will be enough as it is separate file format in wireshark)
3. what additional changes are required for this in the wireshark?
4. Finally, is my above approach for dissecting XML data is correct?
If any one worked in above type of requirement please help me.
Regards,
Upendra