I know that you can export capture data to a plain text file, but I was wondering if there's any way to limit that export scope to just the raw data part of the packet, and if you can apply that so that it actively outputs the data from an ongoing live capture to a text file? This is probably easily set up, but I thought I'd ask if there's any quick and simple filter syntax or anything that could help me out. asked 11 Jan '11, 08:41  Atticus |
One Answer:
Have a look at tcpflow, it's whole purpose in live is exporting the tcp data to file(s) :-) answered 11 Jan '11, 15:13  SYN-bit ♦♦ |
Should probably have mentioned - this needs to be done in windows - any chance you could give a step-by-step for active, ongoing exportation of packet data to a readable text file?