zjsvahehgcj
New Member
So the issue I am running into is that I am trying in python to create a script that will extract data from a PCAP that has been exported into PDML format. The scripting is not the issue however, it is the fact that tshark truncates data when outputting in this format.I am specifically looking at something similar to this...\[code\]<proto name="data-text-lines" showname="Line-based text data: application/x-javascript" size="260" pos="0"><field name="" show="[truncated] document.write('<!-- BEGIN STANDARD TAG - 728 x 90 - ROS: Reference - Home - DO NOT MODIFY -->\n<SCRIPT TYPE=\"text/javascript\" SRC=http://stackoverflow.com/"http://ad.yieldmanager.com/st?ad_type=ad&ad_size=728x90§ion=1734977/"></SCRIPT>&apos
;docum" size="260" pos="0" value="http://stackoverflow.com/questions/11523174/646f63756d656e742e777269746528273c212d2d20424547494e205354414e4441524420544147202d203732382078203930202d20524f533a205265666572656e6365202d20486f6d65202d20444f204e4f54204d4f44494659202d2d3e5c6e3c53435249505420545950453d5c22746578742f6a6176617363726970745c22205352433d5c22687474703a2f2f61642e7969656c646d616e616765722e636f6d2f73743f61645f747970653d61642661645f73697a653d3732387839302673656374696f6e3d313733343937375c223e3c5c2f5343524950543e27293b646f63756d656e742e777269746528275c6e3c212d2d20454e4420544147202d2d3e27293b0a"/>\[/code\]I know for a fact that this data exists within the capture because from within the Wireshark application you can go to copy -> bytes -> printable text only and recieve the complete un-truncated version of the string. However given the fact that I am attempting to write an automated script, using Wireshark does not appear to be an option.So to summarize my question is, how do I produce a PDML version of a packet capture which contains no truncated strings?
;docum" size="260" pos="0" value="http://stackoverflow.com/questions/11523174/646f63756d656e742e777269746528273c212d2d20424547494e205354414e4441524420544147202d203732382078203930202d20524f533a205265666572656e6365202d20486f6d65202d20444f204e4f54204d4f44494659202d2d3e5c6e3c53435249505420545950453d5c22746578742f6a6176617363726970745c22205352433d5c22687474703a2f2f61642e7969656c646d616e616765722e636f6d2f73743f61645f747970653d61642661645f73697a653d3732387839302673656374696f6e3d313733343937375c223e3c5c2f5343524950543e27293b646f63756d656e742e777269746528275c6e3c212d2d20454e4420544147202d2d3e27293b0a"/>\[/code\]I know for a fact that this data exists within the capture because from within the Wireshark application you can go to copy -> bytes -> printable text only and recieve the complete un-truncated version of the string. However given the fact that I am attempting to write an automated script, using Wireshark does not appear to be an option.So to summarize my question is, how do I produce a PDML version of a packet capture which contains no truncated strings?