pipe tshark output to java program

Question

i want to pipe packets from tshark to java program

when i use this command

tshark -i 1 -T fields -e frame.number -e ip.src -e tcp.window_size_value -e frame.time -e data.text -e tcp.analysis.duplicate_ack -e tcp.analysis.out_of_order -e tcp.analysis.retransmission -e tcp.analysis.fast_retransmission -e tcp.analysis.spurious_retransmission -e tcp.analysis.zero_window -e tcp.stream -E header=y -E separator=, >output.csv

it create output.csv file with columns i mentioned in the command

i want to flush packets captured by tshark to java program so i found this code

package javaapplication25;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.*;
/**
*


@author shedalap
*/
public class JavaApplication25 {
/**


@param args the command line arguments
*/
public static void main(String[] args)throws IOException{
BufferedReader in = new BufferedReader(new InputStreamReader(System.in));
String s;
while ((s=in.readLine())!=null&&s.length()!=0) {
System.out.println(in.read());
}
}
}

when i run the program no problems

in tshark i put this command

tshark -r 111.pcapng -T fields -e frame.number -e ip.src -e tcp.window_size_value -e frame.time -e data.text -e tcp.analysis.duplicate_ack -e tcp.analysis.out_of_order -e tcp.analysis.retransmission -e tcp.analysis.fast_retransmission -e tcp.analysis.spurious_retransmission -e tcp.analysis.zero_window -e tcp.stream -E header=y -E separator=, -l | java "C:\Users\shedalap\Documents\NetBeansProjects\JavaApplication25\build\classes\javaapplication25.class"

i get this error

tshark : an error occurred while printing packets : invalid arguments

why what is wrong ?

thank you very much

Answer 1

tshark : an error occurred while printing packets : invalid arguments

That's because nothing is reading what tshark writes to STDOUT, probably because your Java program does not work as you expect it.

You'll get the same tshark error, if you pipe thshark output to dir (not reading from STDIN).

So, please check the error message you get when you run the following command:

echo "huhu" | java "C:\Users\shedalap\Documents\NetB eansProjects\JavaApplication25\build\classes\javaapplication25.class"

And then ask your local Java guru what that means and how to fix it.

++ UPDATE ++

I did not see the package statement in the Java code in the first place. This, and the way you are running the Java code (with .class) causes the termination of your java process with errors.

So, to fix your Java problem, still ask your local Java guru, as this ia the Wireshark Q&A site!

Besides that you can try to either remove the package statement or call your Java code in a different way.

Without package statement:

java JavaApplication25 (no .class !!!)

With package statement:

mkdir JavaApplication25
copy JavaApplication25.class to JavaApplication25
run: java JavaApplication25.JavaApplication25

See the following discussion (and google) for an explanation: http://stackoverflow.com/questions/3081689/why-cant-i-run-my-java-hello-world-program-if-it-is-inside-a-package

Regards
Kurt