This is our old Q&A Site. Please post any new questions and answers at

I need to show structured data (HTML rich snippets) in WireShark UI (i.e. RDFa, Microdata, JSON-LD and Microformats). How to do parse HTML over HTTP/S to detect rich snippets and show all found in WireShark UI. I was thinking a subdissector for each type found (e.g. hRecipe) but this does not make sense if HTTP has TCP as a subdissector. What is the best approach?

asked 02 Oct '16, 12:50

neuralsea's gravatar image

accept rate: 0%

It's reverse, http is a subdissector of tcp, i.e. the tcp dissector invokes http dissector if the payload matches the heuristic criteria used to identify http, or if the tcp port matches one of those registered for http. Accordingly, you would have to hook your own dissectors to http dissector's list of heuristic sub-dissectors.

(02 Oct '16, 13:17) sindy

Thank you sindy. This has helped tremendously.

(02 Oct '16, 13:40) neuralsea
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 02 Oct '16, 12:50

question was seen: 721 times

last updated: 02 Oct '16, 13:40

p​o​w​e​r​e​d by O​S​Q​A