This is a static archive of our old Q&A Site. Please post any new questions and answers at

After converting pcap to text , I want only data part in text file how can i do that?


I have converted one pcap file with tshark command tshark -V -r filename.pcap it is giving whole dissection of each and every packets. But I want only data part which is after UDP or TCP protocol as mentioned in picture. How can i achieve this thing?

alt text

asked 30 Mar '15, 01:14

ankit's gravatar image

accept rate: 25%

edited 30 Mar '15, 01:15

One Answer:


answered 30 Mar '15, 03:16

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
accept rate: 15%