如何在Wireshark中仅导出可打印文本(或任何其他数据包属性) [英] How to export printable text only(or any other packet property) in wireshark

问题描述

长话短说-我正在使用Wireshark将SQL从供应商工具捕获到Oracle数据库.它已经具有用于TNS协议的解码器(很棒)，并且我可以通过

Long story short - I'm capturing SQLs from vendor tool to Oracle database by using Wireshark. It already has decoder for TNS protocol (which is great) and I can access text of SQL by

Right Click->Copy->Bytes(Printable Text Only). 

问题在于存在大量的数据包，右键单击每个数据包可能需要一段时间.我想知道是否有任何方法可以直接从Wireshark导出仅可打印文本".理想情况下，我想要一个带有语句的文本文件.

The problem is that there are tons of packets and doing right-click on each of them could take ages. I was wondering if there any way to export 'Printable Text Only' right from Wireshark. Ideally I want to have a text file with statements.

任何帮助将不胜感激.

推荐答案

我不知道如何使用TNS.但是您可以使用tshark进行类似的操作，例如查看http请求.

I don't know how to do it with TNS. but you can do something like this using tshark, for example to look at http requests.

tshark -T fields -e http.request.uri

因此，如果您可以查看TNS解码器中的选项，则应该能够获取该字段并将输出重定向到文件.

So if you can look at the options in the TNS decoder, you should be able to grab that field and redirect the output to a file.

这篇关于如何在Wireshark中仅导出可打印文本(或任何其他数据包属性)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！