This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

apply tshark patch to filter dynamic http header fields

0

I was wondering if someone could help me getting this patch to work. I am interested in the ability to parse out the x-wap-profile field that this user was able to accomplish. I am unsure how I need to compile or what the process is so that I can use tshark in the manner described in the wireshark Bug referenced below.

Appreciate the assistance.

Wireshark-bugs: [Wireshark-bugs] [Bug 3242] Dynamic header fields for HTTP

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3242

asked 06 Feb '13, 17:17

boardermartin's gravatar image

boardermartin
16114
accept rate: 0%


One Answer:

3

The bug's state is RESOLVED FIXED, with in the comments the remark that it's committed, so there's nothing you need to compile. Just a recent enough Wireshark version will do.

What you do need to do is setup a UAT (User Access Table) with the desired configuration. You usually take Wireshark to do this. Go to the HTTP protocol preferences and click Edit at Custom HTTP header fields. There you fill in what you need.

This then is stored in your profile with the other Wireshark settings in a file called custom_http_header_fields, which looks something like this:

# This file is automatically generated, DO NOT MODIFY.
"x-wap-profile","The WAP profile"

answered 06 Feb '13, 22:12

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Worked out perfect, thanks for the assistance!

(07 Feb '13, 15:58) boardermartin