apply tshark patch to filter dynamic http header fields

Question

I was wondering if someone could help me getting this patch to work. I am interested in the ability to parse out the x-wap-profile field that this user was able to accomplish. I am unsure how I need to compile or what the process is so that I can use tshark in the manner described in the wireshark Bug referenced below.

Appreciate the assistance.

Wireshark-bugs: [Wireshark-bugs] [Bug 3242] Dynamic header fields for HTTP

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3242

Accepted Answer

The bug's state is RESOLVED FIXED, with in the comments the remark that it's committed, so there's nothing you need to compile. Just a recent enough Wireshark version will do.

What you do need to do is setup a UAT (User Access Table) with the desired configuration. You usually take Wireshark to do this. Go to the HTTP protocol preferences and click Edit at Custom HTTP header fields. There you fill in what you need.

This then is stored in your profile with the other Wireshark settings in a file called custom_http_header_fields, which looks something like this:

# This file is automatically generated, DO NOT MODIFY.
"x-wap-profile","The WAP profile"