Files from Wireshark to yEd

Question

I am analyzing a capture using Wireshark and wanted to know if there was a way to use what yEd has to offer to get a better picture of the network I am analyzing.

Can I import a .cap or .pcap file to yEd?

Answer 1

yEd supports these file formats: http://yed.yworks.com/support/manual/fileformat.html

If you can transform .cap/.pcap files to GraphML (yEd's default file format), you should be fine.

Comments

And how do I do that?

---

Well, unfortunately converting *.cap/*.pcap into GraphML is quite difficult.
However according to Is there a way to programatically export files using Wireshark's facilities? it is possible to use WireShark (or the command line tool tshark) for exporting *.cap/*.pcap files in an XML format. If you are able to create an XSLT stylesheet for transforming the resulting XML files into GraphML, you may import the XML files exported from WireShark together with your custom XSLT stylesheet into yEd. Creating an appropriate XSLT stylesheet is the difficult part.