Wireshark-users: Re: [Wireshark-users] Eurex MISS / CME MDP dissectors

Date: Mon, 6 Nov 2006 15:07:24 +0000
If it is XML, that's a (relatively) easy job...

- first take a look to http://wiki.wireshark.org/XML to know what you
are to face

- take a look at one of the eurex packets
   - what's the http Content-Type (or else tell us what protocol
encapsulates it)
  -create a dummy dtd file called eurex.dtd in wireshark_dir/dtds
  - add to it:
    <? wireshark:protocol
        proto_name="eurex"
        description="Eurex Feed"
        hierarchy="yes"
        media="aaaa/bbbb" ?> <!-- what you get in the Content-Type -->

at this point if you see as eurex take a look to an rss feed and how
rss.dtd is made and do preety much the same for your xml data

Luis

On 11/6/06, Jaap Keuter <jaap.keuter@xxxxxxxxx> wrote:
Hi,

It's an XML based protocol, but closed to the public.

  As closed as xml can be once used... (very little!)

See
http://www.eurexchange.com/download/documents/circulars/cf0622006e.pdf
GTKBU -- good to know but useless :)

On Mon, 6 Nov 2006, LEGO wrote:

> On 11/6/06, Jee Kay <jeekay+wireshark@xxxxxxxxx> wrote:
> > Working in the financial services industry I frequently find myself
> > having to debug the multicast streams of Eurex and the CME price
> > feeds.
> >
> > I was wondering if anyone has a wireshark dissector available for
> > either of these two protocols, or could point me in the direction of
> > who might / how to go about writing one?
>
> a good start point would be:
> - a pointer to  the specifications f those protocols.
> - to have some capture files with as much different messages
> - write wiki pages describing what/how this protocols do
> (http://wiki.wireshark.org)

--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan