parse::pidl::wireshark::conformance(3) [centos man page]
..::pidl::lib::Parse::Pidl::Wireshark::Conformance(3) Samba Documentation ..::pidl::lib::Parse::Pidl::Wireshark::Conformance(3)NAME
Parse::Pidl::Wireshark::Conformance - Conformance file parser for Wireshark
DESCRIPTION
This module supports parsing Wireshark conformance files (*.cnf).
FILE FORMAT
Pidl needs additional data for Wireshark output. This data is read from so-called conformance files. This section describes the format of
these files.
Conformance files are simple text files with a single command on each line. Empty lines and lines starting with a '#' character are
ignored. Arguments to commands are separated by spaces.
The following commands are currently supported:
TYPE name dissector ft_type base_type mask valsstring alignment
Register new data type with specified name, what dissector function to call and what properties to give header fields for elements of
this type.
NOEMIT type
Suppress emitting a dissect_type function for the specified type
PARAM_VALUE type param
Set parameter to specify to dissector function for given type.
HF_FIELD hf title filter ft_type base_type valsstring mask description
Generate a custom header field with specified properties.
HF_RENAME old_hf_name new_hf_name
Force the use of new_hf_name when the parser generator was going to use old_hf_name.
This can be used in conjunction with HF_FIELD in order to make more than one element use the same filter name.
ETT_FIELD ett
Register a custom ett field
STRIP_PREFIX prefix
Remove the specified prefix from all function names (if present).
PROTOCOL longname shortname filtername
Change the short-, long- and filter-name for the current interface in Wireshark.
FIELD_DESCRIPTION field desc
Change description for the specified header field. `field' is the hf name of the field.
IMPORT dissector code...
Code to insert when generating the specified dissector. @HF@ and @PARAM@ will be substituted.
INCLUDE filename
Include conformance data from the specified filename in the dissector.
TFS hf_name "true string" "false string"
Override the text shown when a bitmap boolean value is enabled or disabled.
MANUAL fn_name
Force pidl to not generate a particular function but allow the user to write a function manually. This can be used to remove the
function for only one level for a particular element rather than all the functions and ett/hf variables for a particular element as the
NOEMIT command does.
EXAMPLE
INFO_KEY OpenKey.Ke
perl v5.16.3 2013-06-13 ..::pidl::lib::Parse::Pidl::Wireshark::Conformance(3)
Check Out this Related Man Page
IDL2WRS(1) The Wireshark Network Analyzer IDL2WRS(1)NAME
idl2wrs - CORBA IDL to Wireshark Plugin Generator
SYNOPSIS
idl2wrs filename
DESCRIPTION
idl2wrs is a program that takes a user specified CORBA IDL file and generates "C" source code for a Wireshark "plugin".
This resulting file can be compiled as a Wireshark plugin, and used to monitor GIOP/IIOP traffic that is using this IDL.
idl2wrs is actually a shell script wrapper for two Python programs.
These programs are:
wireshark_be.py - Contains the main IDL Visitor Class
wireshark_gen.py - Contains the Source Code Generator Class
idl2wrs supports heuristic dissection of GIOP/IIOP traffic, and some experimental code for explicit dissection, based on Object Key <->
Repository Id mapping. However, code for heuristic based plugins is generated by default, and users should consider this the preferred
method unless you have some namespace collisions.
OPTIONS
Currently there are no options. idl2wrs can be invoked as follows.
1. To write the C code to stdout.
idl2wrs <your_file.idl>
eg: idl2wrs echo.idl
2. To write to a file, just redirect the output.
idl2wrs echo.idl > packet-test.c
ENVIRONMENT
idl2wrs will look for wireshark_be.py and wireshark_gen.py in $PYTHONPATH/site-packages/ and if not found, will try the current directory
./
The -p option passed to omniidl (inside idl2wrs) indicates where wireshark_be.py and wireshark_gen.py will be searched. This may need
tweaking if you place these files somewhere else.
If it complains about being unable to find some modules (eg tempfile.py), you may want to check if PYTHONPATH is set correctly.
eg: PYTHONPATH=/usr/lib/python1.5/
SEE ALSO wireshark(1), tshark(1)NOTES
idl2wrs (including wireshark_be.py and wireshark_gen.py) are part of the Wireshark distribution. The latest version of Wireshark can be
found at <http://www.wireshark.org>.
idl2wrs uses omniidl, an IDL parser, and can be found at <http://omniorb.sourceforge.net/>
TODO
Some of the more important things to do are:
o Improve Explicit dissection code.
o Improve command line options.
o Improve decode algorithm when we have operation name collision.
AUTHORS
Original Author
-------- ------
Frank Singleton <frank.singleton[AT]ericsson.com>
Contributors
------------
1.8.2 2012-06-05 IDL2WRS(1)