Enhancement Request - Add Save As Raw Output

This issue was migrated from bug 11118 in our old bug tracker.

Original bug information:

Reporter: rya…@‍gma…
Status: RESOLVED FIXED
Product: Wireshark
Component: Qt UI
OS: All
Platform: All
Version: 1.99.x (Experimental)

rya…@‍gma… said:

Build Information: $ wireshark -v Wireshark 1.99.5 (SVN Rev Unknown from unknown)

Copyright 1998-2015 Gerald Combs <gerald@‍wireshark.org> and contributors. License GPLv2+: GNU GPL version 2 or later <http://www.gnu.org/licenses/old-licenses/gpl-2.0.html> This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 4.8.6, with libpcap, without POSIX capabilities, with libz 1.2.5, with GLib 2.42.2, without SMI, with c-ares 1.10.0, with Lua 5.2, with GnuTLS 3.3.14, with Gcrypt 1.6.3, with MIT Kerberos, with GeoIP, without PortAudio, with AirPcap.

Running on Mac OS X 10.10.3, build 14D131 (Darwin 14.3.0), with locale C, with libpcap version 1.5.3 - Apple version 47, with libz 1.2.5, with GnuTLS 3.3.14, with Gcrypt 1.6.3, without AirPcap. Intel(R) Core(TM) i7-4850HQ CPU @ 2.30GHz (with SSE4.2)

Built using clang 4.2.1 Compatible Apple LLVM 6.1.0 (clang-602.0.49).

opening enhancement request per:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11115

expected procedure for use of requested enhancement:
1. right-click packet
2. choose Follow <protocol> Stream
3. choose Save As
4. enter file name
5. press Save

raw output is now saved as user-specified file name.
this functionality is currently present in Wireshark GTK UI.

thank you,
ryan

added enhancement uiqt versiondev labels

Guy Harris said:

Does saving as "UTF-8" do what you want? A quick look at the Qt UI code suggests that it may have renamed the "Raw" option to "UTF-8".

Pascal Quantin said:

According to my tests, UTF-8 output != raw output. This can be verified by comparing the output generated by GTK and Qt UI with the capture found in bug #11115 (closed). With GTK the first bytes are: 47 40 00 10 00 00 B0 0D 00 01 C1 00 00 00 01 E0 With Qt the first bytes are: 47 40 00 10 00 00 EF BF BD 0D 00 01 EF BF BD 00

As you can see we seem to have some character code escaping.

Pascal Quantin said:

Marking for 2.0 release as this is a feature that was available in Wireshark 1.x. Feel free to descope it if you think this is not a blocker.

Gerrit Code Review said:

Change 11047 had a related patch set uploaded by Pascal Quantin: Qt: add ability to save raw output to follow windows

https://code.wireshark.org/review/11047

Gerrit Code Review said:

Change 11047 merged by Anders Broman: Qt: add ability to save raw output to follow window

https://code.wireshark.org/review/11047

Gerrit Code Review said:

Change 11085 had a related patch set uploaded by Pascal Quantin: Qt: add ability to save raw output to follow window

https://code.wireshark.org/review/11085

Gerrit Code Review said:

Change 11085 merged by Pascal Quantin: Qt: add ability to save raw output to follow window

https://code.wireshark.org/review/11085

closed