[sldev] [VWR] Wireshark disector for SL protocol

[Robin Cornelius]

Lawson English wrote:
> Robin Cornelius wrote:
>> Hi everyone,
>>
>> Has anyone got/written or knows about a wireshark/ethereal dissector for
>> the secondlife protocol.
>
> BTW, is there a specific reason why you don't leverage libsl? For a 
> long time, I couldn't because of endian issues on PowerPC Macs, but 
> I'm not sure why YOU need to reinvent the wheel here. At the least, 
> you can use WireShark to monitor the client-side traffic since all 
> CAPs info to the server is sent via https while all the traffic sent 
> to SLProxy is sent via HTTP and honestly the most interesting stuff is 
> all being sent via CAPs.
>
I find wireshark a useful network debugging tool, if i was to use libsl 
then i would have to do additional coding where as i just need to write 
a parser to plugin to wireshark and all the packet 
capture,logging,display etc is done for me.

Secondly i find i learn more taking something apart myself than reading 
documentation.

As for CAPS, may be its worth using SLproxy and wireshark together to be 
able to see the traffic? either wedge wireshark on lo interface or dump 
from slproxy to a pcap file then just read in wireshark afterwards. 
wireshark already disects the http part so just need to add the caps 
specific parts of the packet that transport via http. Clearly this 
dosn't work with out a proxy as the https traffic will be pretty useless.

I don't consider this reinventing the wheel at all. I think its just an 
additional tool that can be used

Robin