This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello ,

I would like to know the procedure for converting a .pcap wireshark trace into .txt format and it should be in readable format. I have looked some procedures but it is still not clear to me. Do i need to install any other .exe other then wireshark to do so ?

Thanks, Manoj

asked 11 Jan '14, 05:28

Manoj%20Singh's gravatar image

Manoj Singh
16112
accept rate: 0%


You can just open the trace in the lastest stable build of Wireshark (1.10.5 at the moment) and then select "Menu" -> "File" -> "Export Packet Dissections" -> "As Plain Text File". Select the packet range you want to see in your text file, e.g. packets 1-100 or so, and set the packet format to whatever you need. Most likely "Packet Details" or "Packet Summary line". Try both to see which one you need.

You should keep in mind that using "Packet Details" can result in a very long text file depending on the number ob packets you have in your trace.

permanent link

answered 11 Jan '14, 07:44

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

I use the tshark -x -r file.pcap command line when hexdump like output is good for post processing.

permanent link

answered 25 Apr '14, 00:38

nik's gravatar image

nik
112
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×248
×16

question asked: 11 Jan '14, 05:28

question was seen: 44,180 times

last updated: 25 Apr '14, 00:38

p​o​w​e​r​e​d by O​S​Q​A