Request : Ability to convert Raw Packet Data into ASCII!

RouterOS General
1

When using the Packet Sniffer, the RAW PACKET DATA is useless because it would take forever for me to translate it into ascii text to attempt to identify a URL in the packet for instance.

It would be nice to have a View Ascii button on the RAW PACKET DATA page so that I can attempt to translate the information and pick out words in that packet that might help me identify its use.

RAW DATA from PACKET SNIFFER FEATURE:
4500 017e 4b6c 4000 6a06 526a 4638 2e34
46b6 b681 0746 0050 2828 2da0 d508 cf38
5018 faf0 163b 0000 4745 5420 2f69 6d61
6765 732f 6661 6c6c 735f 3034 2e6a 7067
2048 5454 502f 312e 310d 0a41 6363 6570
743a 202a 2f2a 0d0a 5265 6665 7265 723a
2068 7474 703a 2f2f 7777 772e 6173 7065
6e66 616c 6c73 7370 612e 636f 6d2f 686f
6d65 2e68 746d 6c0d 0a41 6363 6570 742d
4c61 6e67 7561 6765 3a20 656e 2d75 730d
0a55 7365 722d 4167 656e 743a 204d 6f7a
696c 6c61 2f34 2e30 2028 636f 6d70 6174
6962 6c65 3b20 4d53 4945 2036 2e30 3b20
5769 6e64 6f77 7320 4e54 2035 2e31 3b20
4675 6e57 6562 5072 6f64 7563 7473 3b20
4d53 4e20 392e 303b 4d53 4e20 392e 313b
204d 534e 6251 3030 323b 204d 534e 6d65
6e2d 7573 3b20 4d53 4e63 4f54 483b 204d
504c 5553 290d 0a41 6363 6570 742d 456e
636f 6469 6e67 3a20 677a 6970 2c20 6465
666c 6174 650d 0a48 6f73 743a 2077 7777
2e61 7370 656e 6661 6c6c 7373 7061 2e63
6f6d 0d0a 436f 6e6e 6563 7469 6f6e 3a20
4b65 6570 2d41 6c69 7665 0d0a 0d0a

2

I second that … even if its not parsed, simply display the ASCII results. Right now we always have to ftp down the file and then use ethereal just to look at a simple URL or server name.

Sam

3

you have that in winbox already. in CLI - i will make a suggestion about this.

4

Normis, can you explain what CLI means? I have Winbox 2.8 and when I go to packet sniffer, I doubleclick on the packet and can view the raw data. How do I convert this to ASCII?


changeip - Ethereal will convert this raw data to ascii? Do I just highlight the raw data, do a copy out of Winbox, and paste it into a text file for Ethereal to interpret somehow?

5

Packet sniff to a file, for instance, sniff.pcap, and then once you stop packet sniffer you can ftp that file to your ethereal workstation and double click to open. You can get fancy and stream it to your workstation using the streaming function, but it gets a little hairy on Windows since it replied with UDP port unknown for every single packet it sends. You can use the mikrotik trafr program and others as well.

Sam

6

cli - command line interface.

in winbox - resize the window that shows raw data - you will see something like this:

7

I guess 2.8.x doesnt include this, but 2.9 does? Cool! Thanks for listening and making the best product ever!

Sam

8

Normis

That is EXACTLY what I am looking for. I just installed 2.9 beta 15 on a blank drive, grabbed the winbox.exe from it, connected to my 2.8.23 router and it doesn’t display the ASCII, but if I connect to the 2.9 beta 15 test router I just installed it DOES display!! Looking forward to the 2.9 release :slight_smile:

9

The winbox.exe is just a loader - the real stuff is on the router, so upgrading the loader will not add any single feature to the GUI interface