Convert Wireshark PCAP Files to Sequence Diagrams

Post on 22-Nov-2014

910 views 11 download

description

Learn how you can use VisualEther to convert Wireshark PCAP files into Sequence Diagrams. This presentation will get you started with VisualEther. You will also learn how fields in messages can be easily mapped to messages and fields in sequence diagrams.

Transcript of Convert Wireshark PCAP Files to Sequence Diagrams

Getting Started: Sequence diagrams from WiresharkVisualize PCAP files by converting them into sequence diagrams.

Wireshark PCAP

Sequence diagram

Field level details

Explore the examplesConvert Wireshark PCAP file into sequence diagrams in three easy steps.

1 Click the “Explore

Examples” button and select the SIP-RTP.pcap file in the SIP-RTP directory.

2 Click the “Browse”

button and select the SIP-RTP.fxt.xml file. 3 Click to

generate sequence diagram.

Explore the generated PDF sequence diagramYou control full details of the generated sequence diagrams.

6 Click on messages to

see full field level details…

4 Failure scenarios is

being flagged with a bookmark.

5 User selected

fields are listed as message parameters.

See full message details in a browser windowAll messages are displayed as collapsible lists that let you navigate the message with ease.

7 Explore the

message contents by expanding the areas of interest.

Choose sequence diagram context by changing the FXT fileControl the protocols, message and fields you see in the generated diagrams.

8 Click Edit to

customize the SIP-RTP.fxt.xml file.

9 Add more

filters like the one shown here.

10 How to select field

names? Turn over to the next slide….

Find the field nameBrowse a message in Wireshark to find the field name to be included in the sequence diagram.

11 Click View to open

the PCAP file in Wireshark.

12 Select the

field that you wish to include in the sequence diagram.

13 Get the field name

from the status bar. Enclose the field names in <opcode> or <param> tags.

Add more document typesInterface documents, regular expression filtered documents, XML export...

14 Open the

generated Scenario Project in EventStudio.

15 Click the

Add Documents icon in EventStudio.

16 Choose between many

more document types.

Document galleryGenerate over 15 types of documents from your PCAP file. Here are a few examples.

High level sequence diagram

XML output to use with other toolsContext

diagram focusing on caller only interactions

Quick access to generated documentsAll documents are generated in a single folder. Click Open Project Folder button to access these documents.

Open the folder containing the generated diagram.

Explore the document generation optionsCustomize VisualEther. Control the layout and document details.

Click the Options button to customize document generation.

Choose between port level or IP address level sequence diagram axis.

IP address and port level axisChoose between 3 levels of detail…

Axis at IP address level

Axis at port level

Axis at IP address level with port number display

Learn moreWe have just scratched the surface of what you can do with VisualEther+EventStudio.

Click Help to open the VisualEther User’s Manual.