WireShark - Can I decode UTF-8 data in the packets

2019-06-15 19:04发布

问题:

In Wireshark, how can I see non-ASCI characters in packets? some of my network data is in UTF-8 encoding and I would like Wireshark to recognize it.

  • Is there a plugin for it?
  • I found this but maybe there is something new about that.
  • I want to see Arabic, Chinese and Hebrew.

回答1:

In Wireshark, how can I see non-ASCI characters in a packet? some of my data in the packets is in the UTF-8 encoding and I would like Wireshark to recognize it.

  • Is there a plugin for it?

No - that's not what Wireshark plugins do. They can dissect packets, and do statistical analysis, but they can't affect the routines that a dissector uses.

  • I found this but maybe there is something new about that.

What's new is that you can (and should) specify the character encoding when dissecting a string.

What's not new is that Wireshark currently doesn't try to fully handle strings it's told are UTF-8 encoded. It can't just blindly try to display them, as they might not be valid UTF-8 strings, or they might contain non-graphic characters. We haven't yet added full UTF-8 support (or support for other character encodings that handle non-ASCII characters).