Right click on the "Session Initiation Protocol" part of the packet and select "Expand Subtrees" Then select Export->Packet-Details->As displayed only. If there's too much information just collapse the part of the packet you're not interested in. This give output that's pretty similar to what you want if you play around with it some.
On Sun, 12 Nov 2006 22:12:15 +0000, "nnp" <[EMAIL PROTECTED]> said: > I have tried that but I cant see any combination of the options > presented to get the output in the format I indicated. Also I only > want the SIP part of the communication and the export function seems > to always include the headers from other layers as well. > > Do you know of any way to get it to format the output in such a way? > > Thanks, > nnp > > On 11/12/06, Hans Nilsson <[EMAIL PROTECTED]> wrote: > > Maybe the export-function? > > > > On Sun, 12 Nov 2006 19:07:07 +0000, "nnp" <[EMAIL PROTECTED]> said: > > > Hi, > > > I have a captured SIP session that I wish to replay using a python > > > script of mine. I require the saved packed dump to be in the form > > > > > > REGISTER sip:127.0.0.1 SIP/2.0 > > > Via: SIP/2.0/UDP 127.0.0.1:5066;rport;branch=z9hG4bKecjlzkte > > > Max-Forwards: 70 > > > To: "Bleh <101>" <sip:[EMAIL PROTECTED]> > > > From: "Blah <101>" <sip:[EMAIL PROTECTED]>;tag=gaerh > > > Call-ID: [EMAIL PROTECTED] > > > CSeq: 396 REGISTER > > > Contact: <sip:[EMAIL PROTECTED]:5066>;expires=3600 > > > Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, REFER, NOTIFY, SUBSCRIBE > > > User-Agent: Bleh/0.4.2 > > > Content-Length: 0 > > > > > > e.g plain text > > > > > > I was wondering how I would go about getting ethereal to save the > > > session in this format. I could probably strip the libpcap headers > > > from each packet after I saved it but i'd prefer if there was an > > > easier way. > > > > > > Thanks, > > > nnp > > > > > > -- > > > http://silenthack.co.uk > > > _______________________________________________ > > > Wireshark-users mailing list > > > [email protected] > > > http://www.wireshark.org/mailman/listinfo/wireshark-users > > -- > > Hans Nilsson > > [EMAIL PROTECTED] > > > > -- > > http://www.fastmail.fm - Access your email from home and the web > > > > _______________________________________________ > > Wireshark-users mailing list > > [email protected] > > http://www.wireshark.org/mailman/listinfo/wireshark-users > > > > > -- > http://silenthack.co.uk > _______________________________________________ > Wireshark-users mailing list > [email protected] > http://www.wireshark.org/mailman/listinfo/wireshark-users -- Hans Nilsson [EMAIL PROTECTED] -- http://www.fastmail.fm - A fast, anti-spam email service. _______________________________________________ Wireshark-users mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-users
