I want to extract the files such as pdfs, images, javascripts etc. from the pcap file captured using wireshark. I want the protocols such as http, ftp, smtp, pop supported. Please let me know how can i extract the files using code preferably c programming to do the same. asked 16 Jun '15, 17:11  kruthi edited 17 Jun '15, 08:38  Kurt Knochner ♦ |
One Answer:
Wireshark is able to export objects from a pcap file, but only for HTTP, DICOM and SMB. If you want to know how that works, take a look at the Wireshark source code (Files: export_object*.c). An alternative are the following tools:
Either use them directly, or take a look at the code to learn from it. Regards answered 17 Jun '15, 08:38 Kurt Knochner ♦ edited 17 Jun '15, 08:38 |
