This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi, i would like to know if somebody knows if there is any script or utility that helps to compare frames in order to see data variations quickly. Thanks in advance. Regards.

asked 22 Dec '10, 03:26

egunon's gravatar image

egunon
1111
accept rate: 0%


The frame dissector provides the option to calculate an MD5 hash of the frame. You can then compare the hashes of the frames to see if they differ, hence if the frames themselves differ.

permanent link

answered 22 Dec '10, 06:17

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Thank you for the answer but this will not help me because i need a bit to bit comparison from de Data of the frame. (evaluating individual signals in an industrial protocol). Regards.

(22 Dec '10, 06:33) egunon

That actually sounds like a fun little project if it doesn't exist. You might be able to use the perl NET::PCAP library to ingest the file, then make the necessary comparison at the offset you desire. You could render the differences and frame numbers into html. I wish I had more time (and PERL knowledge) so I could give you more direction. Maybe someone else knows of something already built (or something that could be easily adapted).

I don't know all of your specifics, but maybe a dissector could be written for the industrial protocol you are analyzing and do away with the need to compare.

permanent link

answered 22 Dec '10, 13:23

Paul%20Stewart's gravatar image

Paul Stewart
3018
accept rate: 6%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×12
×5

question asked: 22 Dec '10, 03:26

question was seen: 2,419 times

last updated: 22 Dec '10, 13:23

p​o​w​e​r​e​d by O​S​Q​A