12
Getting Started: Sequence diagrams from Wireshark Visualize PCAP files by converting them into sequence diagrams. Wireshark PCAP Sequence diagram Field level details

Convert Wireshark PCAP Files to Sequence Diagrams

Embed Size (px)

DESCRIPTION

Learn how you can use VisualEther to convert Wireshark PCAP files into Sequence Diagrams. This presentation will get you started with VisualEther. You will also learn how fields in messages can be easily mapped to messages and fields in sequence diagrams.

Citation preview

Page 1: Convert Wireshark PCAP Files to Sequence Diagrams

Getting Started: Sequence diagrams from WiresharkVisualize PCAP files by converting them into sequence diagrams.

Wireshark PCAP

Sequence diagram

Field level details

Page 2: Convert Wireshark PCAP Files to Sequence Diagrams

Explore the examplesConvert Wireshark PCAP file into sequence diagrams in three easy steps.

1 Click the “Explore

Examples” button and select the SIP-RTP.pcap file in the SIP-RTP directory.

2 Click the “Browse”

button and select the SIP-RTP.fxt.xml file. 3 Click to

generate sequence diagram.

Page 3: Convert Wireshark PCAP Files to Sequence Diagrams

Explore the generated PDF sequence diagramYou control full details of the generated sequence diagrams.

6 Click on messages to

see full field level details…

4 Failure scenarios is

being flagged with a bookmark.

5 User selected

fields are listed as message parameters.

Page 4: Convert Wireshark PCAP Files to Sequence Diagrams

See full message details in a browser windowAll messages are displayed as collapsible lists that let you navigate the message with ease.

7 Explore the

message contents by expanding the areas of interest.

Page 5: Convert Wireshark PCAP Files to Sequence Diagrams

Choose sequence diagram context by changing the FXT fileControl the protocols, message and fields you see in the generated diagrams.

8 Click Edit to

customize the SIP-RTP.fxt.xml file.

9 Add more

filters like the one shown here.

10 How to select field

names? Turn over to the next slide….

Page 6: Convert Wireshark PCAP Files to Sequence Diagrams

Find the field nameBrowse a message in Wireshark to find the field name to be included in the sequence diagram.

11 Click View to open

the PCAP file in Wireshark.

12 Select the

field that you wish to include in the sequence diagram.

13 Get the field name

from the status bar. Enclose the field names in <opcode> or <param> tags.

Page 7: Convert Wireshark PCAP Files to Sequence Diagrams

Add more document typesInterface documents, regular expression filtered documents, XML export...

14 Open the

generated Scenario Project in EventStudio.

15 Click the

Add Documents icon in EventStudio.

16 Choose between many

more document types.

Page 8: Convert Wireshark PCAP Files to Sequence Diagrams

Document galleryGenerate over 15 types of documents from your PCAP file. Here are a few examples.

High level sequence diagram

XML output to use with other toolsContext

diagram focusing on caller only interactions

Page 9: Convert Wireshark PCAP Files to Sequence Diagrams

Quick access to generated documentsAll documents are generated in a single folder. Click Open Project Folder button to access these documents.

Open the folder containing the generated diagram.

Page 10: Convert Wireshark PCAP Files to Sequence Diagrams

Explore the document generation optionsCustomize VisualEther. Control the layout and document details.

Click the Options button to customize document generation.

Choose between port level or IP address level sequence diagram axis.

Page 11: Convert Wireshark PCAP Files to Sequence Diagrams

IP address and port level axisChoose between 3 levels of detail…

Axis at IP address level

Axis at port level

Axis at IP address level with port number display

Page 12: Convert Wireshark PCAP Files to Sequence Diagrams

Learn moreWe have just scratched the surface of what you can do with VisualEther+EventStudio.

Click Help to open the VisualEther User’s Manual.