WireShark - Can I decode UTF-8 data in packets?
In Wireshark, how can I see non-ASCI characters in packets? some of my network data is in UTF-8 encoding and I would like Wireshark to recognize it.
- Is there a plugin for it?
- I found this but maybe there is something new about that.
- I want to see Arabic, Chinese and Hebrew.
Answer
In Wireshark, how can I see non-ASCI characters in a packet? some of my data in the packets is in the UTF-8 encoding and I would like Wireshark to recognize it.
- Is there a plugin for it?
No - that's not what Wireshark plugins do. They can dissect packets, and do statistical analysis, but they can't affect the routines that a dissector uses.
- I found this but maybe there is something new about that.
What's new is that you can (and should) specify the character encoding when dissecting a string.
What's not new is that Wireshark currently doesn't try to fully handle strings it's told are UTF-8 encoded. It can't just blindly try to display them, as they might not be valid UTF-8 strings, or they might contain non-graphic characters. We haven't yet added full UTF-8 support (or support for other character encodings that handle non-ASCII characters).