Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide code and XSLT(?) to pull out a TCP stream of bytes #16

Open
mbeckerle opened this issue Dec 28, 2021 · 0 comments
Open

Provide code and XSLT(?) to pull out a TCP stream of bytes #16

mbeckerle opened this issue Dec 28, 2021 · 0 comments

Comments

@mbeckerle
Copy link
Member

This is not so much an issue with the schema, as a immediate need, given that you can parse a PCAP file, one often wants to identify a specific TCP connection, and pull, from the XML Infoset, all the bytes of data on that stream.

Note that due to unordered delivery, sequence numbers, repeats, fragmentation and reassembly of packets, assembly of a TCP stream is complex, possibly too complex for a sensible XSLT, in which case some scala/java code may be needed instead-of, or in addition to the XSLT.

Also, a particular PCAP may not contain the initiation of the TCP stream. The PCAP may capture packets that are the middle of a TCP stream, and similarly, may not contain the end of the TCP stream.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant