Module peachshark

source code

Convert WireShark PDML files into Peach XML files.

Currently does a fairly good job of converting PDML files to Peach XML files including the ability to find sizeof relations by looking for fields that look like a length and matching them up to other fields in the focument.

Todo:

• Support parsing out multiple packets
• Support parsing out multiple proto's in a packet
• Look at proto's earlier then indicated one to pull out transport and transport info (host, ip, etc)
• Generate the Tests/Test/Run sections
• Create multiple Data elements from multiple packets