I need to show structured data (HTML rich snippets) in WireShark UI (i.e. RDFa, Microdata, JSON-LD and Microformats). How to do parse HTML over HTTP/S to detect rich snippets and show all found in WireShark UI. I was thinking a subdissector for each type found (e.g. hRecipe) but this does not make sense if HTTP has TCP as a subdissector. What is the best approach? asked 02 Oct '16, 12:50  neuralsea |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
It's reverse, http is a subdissector of tcp, i.e. the tcp dissector invokes http dissector if the payload matches the heuristic criteria used to identify http, or if the tcp port matches one of those registered for http. Accordingly, you would have to hook your own dissectors to http dissector's list of heuristic sub-dissectors.
Thank you sindy. This has helped tremendously.