Quelqu'un aurait il une idée de cmt je pourrais parser du xml de ce genre:
Il s'agit d'une capture wireshark avec les différents champs des paquets
<?xml version="1.0"?>
<pdml version="0" creator="wireshark/1.2.8">
<packet>
<proto name="geninfo" pos="0" showname="General information" size="201">
<field name="num" pos="0" show="1" showname="Number" value="1" size="201"/>
<field name="len" pos="0" show="201" showname="Frame Length" value="c9" size="201"/>
<field name="caplen" pos="0" show="201" showname="Captured Length" value="c9" size="201"/>
<field name="timestamp" pos="0" show="Apr 16, 2010 11:33:24.422294000" showname="Captured Time" value="1271410404.422294000" size="201"/>
</proto>
<proto name="frame" showname="Frame 1 (201 bytes on wire, 201 bytes captured)" size="201" pos="0">
<field name="frame.time" showname="Arrival Time: Apr 16, 2010 11:33:24.422294000" size="0" pos="0" show="Apr 16, 2010 11:33:24.422294000"/>
<field name="frame.time_delta" showname="Time delta from previous captured frame: 0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
<field name="frame.time_delta_displayed" showname="Time delta from previous displayed frame: 0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
<field name="frame.time_relative" showname="Time since reference or first frame: 0.000000000 seconds" size="0" pos="0" show="0.000000000"/>
<field name="frame.number" showname="Frame Number: 1" size="0" pos="0" show="1"/>
<field name="frame.len" showname="Frame Length: 201 bytes" size="0" pos="0" show="201"/>
<field name="frame.cap_len" showname="Capture Length: 201 bytes" size="0" pos="0" show="201"/>
<field name="frame.marked" showname="Frame is marked: False" size="0" pos="0" show="0"/>
<field name="frame.protocols" showname="Protocols in frame: sll:ip:tcp:data" size="0" pos="0" show="sll:ip:tcp:data"/>
<field name="frame.coloring_rule.name" showname="Coloring Rule Name: TCP" size="0" pos="0" show="TCP"/>
<field name="frame.coloring_rule.string" showname="Coloring Rule String: tcp" size="0" pos="0" show="tcp"/>
</proto>
<proto name="sll" showname="Linux cooked capture" size="16" pos="0">
<field name="sll.pkttype" showname="Packet type: Unicast to us (0)" size="2" pos="0" show="0" value="0000"/>
<field name="sll.hatype" showname="Link-layer address type: 772" size="2" pos="2" show="772" value="0304"/>
<field name="sll.halen" showname="Link-layer address length: 0" size="2" pos="4" show="0" value="0000"/>
<field name="sll.src.other" showname="Source: <MISSING>" size="0" pos="6" show=""/>
<field name="sll.etype" showname="Protocol: IP (0x0800)" size="2" pos="14" show="0x0800" value="0800"/>
</proto>
<proto name="ip" showname="Internet Protocol, Src: 172.20.197.22 (172.20.197.22), Dst: 172.20.197.22 (172.20.197.22)" size="20" pos="16">
<field name="ip.version" showname="Version: 4" size="1" pos="16" show="4" value="45"/>
<field name="ip.hdr_len" showname="Header length: 20 bytes" size="1" pos="16" show="20" value="45"/>
<field name="ip.dsfield" showname="Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)" size="1" pos="17" show="0" value="00">
<field name="ip.dsfield.dscp" showname="0000 00.. = Differentiated Services Codepoint: Default (0x00)" size="1" pos="17" show="0x00" value="0" unmaskedvalue="00"/>
<field name="ip.dsfield.ect" showname=".... ..0. = ECN-Capable Transport (ECT): 0" size="1" pos="17" show="0" value="0" unmaskedvalue="00"/>
<field name="ip.dsfield.ce" showname=".... ...0 = ECN-CE: 0" size="1" pos="17" show="0" value="0" unmaskedvalue="00"/>
</field>
<field name="ip.len" showname="Total Length: 185" size="2" pos="18" show="185" value="00b9"/>
<field name="ip.id" showname="Identification: 0x262f (9775)" size="2" pos="20" show="0x262f" value="262f"/>
<field name="ip.flags" showname="Flags: 0x02 (Don't Fragment)" size="1" pos="22" show="0x02" value="40">
<field name="ip.flags.rb" showname="0.. = Reserved bit: Not Set" size="1" pos="22" show="0" value="0" unmaskedvalue="40"/>
<field name="ip.flags.df" showname=".1. = Don't fragment: Set" size="1" pos="22" show="1" value="1" unmaskedvalue="40"/>
<field name="ip.flags.mf" showname="..0 = More fragments: Not Set" size="1" pos="22" show="0" value="0" unmaskedvalue="40"/>
</field>
<field name="ip.frag_offset" showname="Fragment offset: 0" size="2" pos="22" show="0" value="4000"/>
<field name="ip.ttl" showname="Time to live: 64" size="1" pos="24" show="64" value="40"/>
<field name="ip.proto" showname="Protocol: TCP (0x06)" size="1" pos="25" show="0x06" value="06"/>
<field name="ip.checksum" showname="Header checksum: 0x31ba [correct]" size="2" pos="26" show="0x31ba" value="31ba">
<field name="ip.checksum_good" showname="Good: True" size="2" pos="26" show="1" value="31ba"/>
<field name="ip.checksum_bad" showname="Bad : False" size="2" pos="26" show="0" value="31ba"/>
</field>
<field name="ip.src" showname="Source: 172.20.197.22 (172.20.197.22)" size="4" pos="28" show="172.20.197.22" value="ac14c516"/>
<field name="ip.addr" showname="Source or Destination Address: 172.20.197.22 (172.20.197.22)" hide="yes" size="4" pos="28" show="172.20.197.22" value="ac14c516"/>
<field name="ip.src_host" showname="Source Host: 172.20.197.22" hide="yes" size="4" pos="28" show="172.20.197.22" value="ac14c516"/>
<field name="ip.host" showname="Source or Destination Host: 172.20.197.22" hide="yes" size="4" pos="28" show="172.20.197.22" value="ac14c516"/>
<field name="ip.dst" showname="Destination: 172.20.197.22 (172.20.197.22)" size="4" pos="32" show="172.20.197.22" value="ac14c516"/>
<field name="ip.addr" showname="Source or Destination Address: 172.20.197.22 (172.20.197.22)" hide="yes" size="4" pos="32" show="172.20.197.22" value="ac14c516"/>
<field name="ip.dst_host" showname="Destination Host: 172.20.197.22" hide="yes" size="4" pos="32" show="172.20.197.22" value="ac14c516"/>
<field name="ip.host" showname="Source or Destination Host: 172.20.197.22" hide="yes" size="4" pos="32" show="172.20.197.22" value="ac14c516"/>
</proto>
<proto name="tcp" showname="Transmission Control Protocol, Src Port: 49164 (49164), Dst Port: afs3-callback (7001), Seq: 1, Ack: 1, Len: 145" size="20" pos="36">
<field name="tcp.srcport" showname="Source port: 49164 (49164)" size="2" pos="36" show="49164" value="c00c"/>
<field name="tcp.dstport" showname="Destination port: afs3-callback (7001)" size="2" pos="38" show="7001" value="1b59"/>
<field name="tcp.port" showname="Source or Destination Port: 49164" hide="yes" size="2" pos="36" show="49164" value="c00c"/>
<field name="tcp.port" showname="Source or Destination Port: 7001" hide="yes" size="2" pos="38" show="7001" value="1b59"/>
<field name="tcp.stream" showname="Stream index: 0" size="0" pos="36" show="0"/>
<field name="tcp.len" showname="TCP Segment Len: 145" hide="yes" size="1" pos="48" show="145" value="50"/>
<field name="tcp.seq" showname="Sequence number: 1 (relative sequence number)" size="4" pos="40" show="1" value="3e40899a"/>
<field name="tcp.nxtseq" showname="Next sequence number: 146 (relative sequence number)" size="0" pos="36" show="146"/>
<field name="tcp.ack" showname="Acknowledgement number: 1 (relative ack number)" size="4" pos="44" show="1" value="3ed19f48"/>
<field name="tcp.hdr_len" showname="Header length: 20 bytes" size="1" pos="48" show="20" value="50"/>
<field name="tcp.flags" showname="Flags: 0x18 (PSH, ACK)" size="1" pos="49" show="0x18" value="18">
<field name="tcp.flags.cwr" showname="0... .... = Congestion Window Reduced (CWR): Not set" size="1" pos="49" show="0" value="0" unmaskedvalue="18"/>
<field name="tcp.flags.ecn" showname=".0.. .... = ECN-Echo: Not set" size="1" pos="49" show="0" value="0" unmaskedvalue="18"/>
<field name="tcp.flags.urg" showname="..0. .... = Urgent: Not set" size="1" pos="49" show="0" value="0" unmaskedvalue="18"/>
<field name="tcp.flags.ack" showname="...1 .... = Acknowledgement: Set" size="1" pos="49" show="1" value="1" unmaskedvalue="18"/>
<field name="tcp.flags.push" showname=".... 1... = Push: Set" size="1" pos="49" show="1" value="1" unmaskedvalue="18"/>
<field name="tcp.flags.reset" showname=".... .0.. = Reset: Not set" size="1" pos="49" show="0" value="0" unmaskedvalue="18"/>
<field name="tcp.flags.syn" showname=".... ..0. = Syn: Not set" size="1" pos="49" show="0" value="0" unmaskedvalue="18"/>
<field name="tcp.flags.fin" showname=".... ...0 = Fin: Not set" size="1" pos="49" show="0" value="0" unmaskedvalue="18"/>
</field>
<field name="tcp.window_size" showname="Window size: 65535" size="2" pos="50" show="65535" value="ffff"/>
<field name="tcp.checksum" showname="Checksum: 0xe301 [validation disabled]" size="2" pos="52" show="0xe301" value="e301">
<field name="tcp.checksum_good" showname="Good Checksum: False" size="2" pos="52" show="0" value="e301"/>
<field name="tcp.checksum_bad" showname="Bad Checksum: False" size="2" pos="52" show="0" value="e301"/>
</field>
<field name="" show="SEQ/ACK analysis" size="0" pos="36" value="">
<field name="tcp.analysis.bytes_in_flight" showname="Number of bytes in flight: 145" size="0" pos="36" show="145"/>
</field>
</proto>
<proto name="fake-field-wrapper">
<field name="data" value="0000009105651800129011000001840000008701010001007372017870772b050100237765626c6f6769632e6170702e696b65612d7765626170702d6a6d782d636c69656e74000000d6237765626c6f6769632e776f726b617265612e537472696e67576f726b436f6e7465787400114731523243305f323031302d30332d323677020000787003fe07a7fe07a9fe07a9"/>
<field name="data.data" showname="Data: 000000910565180012901100000184000000870101000100..." size="145" pos="56" show="00:00:00:91:05:65:18:00:12:90:11:00:00:01:84:00:00:00:87:01:01:00:01:00:73:72:01:78:70:77:2b:05:01:00:23:77:65:62:6c:6f:67:69:63:2e:61:70:70:2e:69:6b:65:61:2d:77:65:62:61:70:70:2d:6a:6d:78:2d:63:6c:69:65:6e:74:00:00:00:d6:23:77:65:62:6c:6f:67:69:63:2e:77:6f:72:6b:61:72:65:61:2e:53:74:72:69:6e:67:57:6f:72:6b:43:6f:6e:74:65:78:74:00:11:47:31:52:32:43:30:5f:32:30:31:30:2d:30:33:2d:32:36:77:02:00:00:78:70:03:fe:07:a7:fe:07:a9:fe:07:a9" value="0000009105651800129011000001840000008701010001007372017870772b050100237765626c6f6769632e6170702e696b65612d7765626170702d6a6d782d636c69656e74000000d6237765626c6f6769632e776f726b617265612e537472696e67576f726b436f6e7465787400114731523243305f323031302d30332d323677020000787003fe07a7fe07a9fe07a9"/>
<field name="data.len" showname="Length: 145" size="0" pos="56" show="145"/>
</proto>
</packet>