Skip to content

Instantly share code, notes, and snippets.

@goodell
Created June 12, 2015 00:22
Show Gist options
  • Save goodell/afe9e1d874609ed33c66 to your computer and use it in GitHub Desktop.
Save goodell/afe9e1d874609ed33c66 to your computer and use it in GitHub Desktop.
define pktdump
dump binary memory /tmp/dgoodell-pktdump.bin (char*)$arg0 (((char*)$arg0)+$arg1)
!od -Ax -tx1 -v /tmp/dgoodell-pktdump.bin | text2pcap - - | tshark -V -x -i -
end
document pktdump
Dump a network packet in memory with tshark.
Example usage: pktdump ADDRESS LENGTH
end
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment