This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Saving captured packet with simple hex plain text

0

The normal packet is saved as

+---------+---------------+----------+ 03:48:19,690,420 ETHER

|09c|ad|97|84|0e|d1|40|a8|f0|9c|a2|00|08|00|45|00|05|dc|00|84|40|00|34|06|63|a9|2d|21|23|eb|0a|0b|81|d8|01|bb|0e|af|e9|19|43|f4|dd|6f|be|5a|50|10|01|1b|0d|f8|00|00|5f|93|d9|2b|90|80|a6|0d|88|8a|9d|f1|2a|79|e2|8b|21|a4|d6|89|bb|e2|cf|bd|cd|b2|09|95|a3|c6|02|a6|fb|d9|84|aa|7c|d3|c9|a5|12|2c|49|0a|09|e0|86|34|ab|0f|a2|ab|39|9e.....

But is there any way we can save in plain hex without '|' symbol and other details. Just plain hex like 09cad97840ed14018....

asked 29 Jun '15, 20:58

akseldho's gravatar image

akseldho
6112
accept rate: 0%

why cant you just write a script using sed to replace '|' with '' and drop the other line which starts with a '+'?

(29 Jun '15, 23:17) koundi