This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Stop wireshark from decoding wbxml?

0

How do I stop wireshark from attempt to decode wbxml? I want also to be able to see the actual binary data! Also wireshark cannot decode wbxml properly!

asked 02 Jun '12, 16:02

dakke's gravatar image

dakke
6114
accept rate: 0%

edited 02 Jun '12, 21:17

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142


2 Answers:

2

Disable wbxml in the GUI:

Analyze -> Enabled Protocols -> uncheck the Status for WBXML

Regards
Kurt

answered 02 Jun '12, 16:21

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

...and then submit a bug report with sample capture file so wbxml dissection can hopefully be fixed.

(02 Jun '12, 21:16) cmaynard ♦♦

1

You can always see the undecoded data in the Packet Bytes pane. It will be represented in hexadecimal, not binary, on the left side of the pane, and ASCII to the right.

answered 02 Jun '12, 16:43

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%

Okay thank you for the answers! I was thinking that the hexadecimal representation could but used but it was far to short to make any sense.

I released now that the content was gziped from 142 bytes into 15bytes. There is an "Uncompressed entity body(15 bytes)" tab. But since it is 15bytes it must still be compressed? Now how do I decompress gzip?

(03 Jun '12, 08:58) dakke

Nvm I think I found non-gziped data: I assume it is the last 142 bytes in the frame.

(03 Jun '12, 09:35) dakke