This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How do I stop wireshark from attempt to decode wbxml? I want also to be able to see the actual binary data! Also wireshark cannot decode wbxml properly!

asked 02 Jun '12, 16:02

dakke's gravatar image

dakke
6114
accept rate: 0%

edited 02 Jun '12, 21:17

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142


Disable wbxml in the GUI:

Analyze -> Enabled Protocols -> uncheck the Status for WBXML

Regards
Kurt

permanent link

answered 02 Jun '12, 16:21

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

...and then submit a bug report with sample capture file so wbxml dissection can hopefully be fixed.

(02 Jun '12, 21:16) cmaynard ♦♦

You can always see the undecoded data in the Packet Bytes pane. It will be represented in hexadecimal, not binary, on the left side of the pane, and ASCII to the right.

permanent link

answered 02 Jun '12, 16:43

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%

Okay thank you for the answers! I was thinking that the hexadecimal representation could but used but it was far to short to make any sense.

I released now that the content was gziped from 142 bytes into 15bytes. There is an "Uncompressed entity body(15 bytes)" tab. But since it is 15bytes it must still be compressed? Now how do I decompress gzip?

(03 Jun '12, 08:58) dakke

Nvm I think I found non-gziped data: I assume it is the last 142 bytes in the frame.

(03 Jun '12, 09:35) dakke
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×89
×3

question asked: 02 Jun '12, 16:02

question was seen: 3,127 times

last updated: 03 Jun '12, 09:35

p​o​w​e​r​e​d by O​S​Q​A