This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is there a possibility to compare frames?

0

Hi, i would like to know if somebody knows if there is any script or utility that helps to compare frames in order to see data variations quickly. Thanks in advance. Regards.

asked 22 Dec '10, 03:26

egunon's gravatar image

egunon
1111
accept rate: 0%


2 Answers:

0

The frame dissector provides the option to calculate an MD5 hash of the frame. You can then compare the hashes of the frames to see if they differ, hence if the frames themselves differ.

answered 22 Dec '10, 06:17

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Thank you for the answer but this will not help me because i need a bit to bit comparison from de Data of the frame. (evaluating individual signals in an industrial protocol). Regards.

(22 Dec '10, 06:33) egunon

0

That actually sounds like a fun little project if it doesn't exist. You might be able to use the perl NET::PCAP library to ingest the file, then make the necessary comparison at the offset you desire. You could render the differences and frame numbers into html. I wish I had more time (and PERL knowledge) so I could give you more direction. Maybe someone else knows of something already built (or something that could be easily adapted).

I don't know all of your specifics, but maybe a dissector could be written for the industrial protocol you are analyzing and do away with the need to compare.

answered 22 Dec '10, 13:23

Paul%20Stewart's gravatar image

Paul Stewart
3018
accept rate: 6%