This is our old Q&A Site. Please post any new questions and answers at

Hello, Is there any method to reconstruct HTTP objects using tshark (not wireshark)? Otherwise, could you tell me any other tools to do this?


asked 18 Feb '13, 05:33

fates's gravatar image

accept rate: 0%

Is there any method to reconstruct HTTP objects using tshark

I guess you are talking about an export of 'objects' transmitted via HTTP (files, videos, images, etc.). If so, then there is no easy way to do that in tshark, as there is no such functionality built in. As you are asking for tshark (not Wireshark) I assume you want to automate things, right?

If so, these tools may or may not be interesting for you:

For scripting purposes, justsniffer (Linux) or assniffer (Windows) are probably better tools to extract HTTP data 'objects'.

BTW: Additionally you might be interested in my answer to the following question:


permanent link

answered 18 Feb '13, 07:59

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
accept rate: 15%

edited 18 Feb '13, 08:02

Thanks Kurt. I'll try it. :)

(18 Feb '13, 08:01) fates

Good luck!

Hint: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions.

(18 Feb '13, 08:03) Kurt Knochner ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 18 Feb '13, 05:33

question was seen: 3,983 times

last updated: 18 Feb '13, 08:03

p​o​w​e​r​e​d by O​S​Q​A