Wireshark-users: Re: [Wireshark-users] XML Dissector complaints with "ERROR: Unrecognized text"

From: Alexandre Vieira <nullpt@xxxxxxxxx>
Date: Mon, 17 May 2010 12:40:58 +0100
Hi all,

Just a little update:

I've installed 1.3.5 on my windows laptop and the problem is gone. It parses the XML correctly with and without numbers on the xml tags:

                               <dateTime.iso8601>
                                   20151028T16:04:53+0000
                                   </dateTime.iso8601>

Now I have to be able to build this version on Solaris 10. That won't be fun, certainly.

BR
AJ

On Mon, May 17, 2010 at 12:22 PM, Alexandre Vieira <nullpt@xxxxxxxxx> wrote:
Hi all,

I'm running tshark 1.0.8 on Solaris 10 SPARC. I'm trying to build a packet capture logging solution for an application which our supplier is asking for a 5 digit sum to implement directly on the application.

The traffic I'm trying to capture is XML over HTTP but unfortunately the XML tags contain numbers, which I guess is freaking out tshark xml dissector.

Anyone knows of a workaround for this issue?

/usr/local/bin/tshark -d tcp.port==7080,http -r /tmp/ai_jasus.cap -V
(...)
eXtensible Markup Language
    <?xml
        version="1.0"
        encoding="UTF-8"
        ?>
        <params>
        [ ERROR: Unrecognized text ]

The next thing on the XML is: <dateTime.iso8601>

Thanks in advance

BR
AV

--
Alexandre Vieira - nullpt@xxxxxxxxx




--
Alexandre Vieira - nullpt@xxxxxxxxx