IDL2WRSSection: The Wireshark Network Analyzer (1)
Index Return to Main Contents
NAMEidl2wrs - CORBA IDL to Wireshark Plugin Generator
DESCRIPTIONidl2wrs is a program that takes a user specified CORBA IDL file and generates ``C'' source code for an Wireshark ``plugin''.
This resulting file can be compiled as an Wireshark plugin, and used to monitor GIOP/IIOP traffic that is using this IDL.
idl2wrs is actually a shell script wrapper for two Python programs.
These programs are:
wireshark_be.py - Contains the main IDL Visitor Class
wireshark_gen.py - Contains the Source Code Generator Class
idl2wrs supports heuristic dissection of GIOP/IIOP traffic, and some experimental code for explicit dissection, based on Object Key <-> Repository Id mapping. However, code for heuristic based plugins is generated by default, and users should consider this the preferred method unless you have some namespace collisions.
OPTIONSCurrently there are no options. idl2wrs can be invoked as follows.
1. To write the C code to stdout.
eg: idl2wrs echo.idl
2. To write to a file, just redirect the output.
idl2wrs echo.idl > packet-test.c
ENVIRONMENTidl2wrs will look for wireshark_be.py and wireshark_gen.py in $PYTHONPATH/site-packages/ and if not found, will try the current directory ./
The -p option passed to omniidl (inside idl2wrs) indicates where wireshark_be.py and wireshark_gen.py will be searched. This may need tweaking if you place these files somewhere else.
If it complains about being unable to find some modules (eg tempfile.py), you may want to check if PYTHONPATH is set correctly.
SEE ALSOwireshark(1), tshark(1)
NOTESidl2wrs (including wireshark_be.py and wireshark_gen.py) are part of the Wireshark distribution. The latest version of Wireshark can be found at <http://www.wireshark.org>.
idl2wrs uses omniidl, an IDL parser, and can be found at <http://omniorb.sourceforge.net/>
TODOSome of the more important things to do are:
- * Improve Explicit dissection code.
- * Improve command line options.
- * Improve decode algorithm when we have operation name collision.
Original Author -------- ------ Frank Singleton <frank.singleton[AT]ericsson.com>