This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

After converting pcap to text , I want only data part in text file how can i do that?

0

I have converted one pcap file with tshark command tshark -V -r filename.pcap it is giving whole dissection of each and every packets. But I want only data part which is after UDP or TCP protocol as mentioned in picture. How can i achieve this thing?

alt text

asked 30 Mar '15, 01:14

ankit's gravatar image

ankit
65232328
accept rate: 25%

edited 30 Mar '15, 01:15


One Answer:

0

answered 30 Mar '15, 03:16

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%