This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

[closed] can I get only sublayer data in hex from pcap file?

0

Hello, for example certificate packet contain Frame,TCP, IP, Ethernet, SSL layers. I want only ssl layer hex data.

when I wrote following command: tshark -x -r ssl.pcap

then I get all layers in hex but I want only "ssl" and from these ssl I want "handshake protocol: certificate" data in hex.

Thank You.

asked 28 Aug '15, 03:18

Varsharani%20Hawanna's gravatar image

Varsharani H...
6556
accept rate: 0%

closed 28 Aug '15, 08:15

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237

The question has been closed for the following reason “Duplicate Question” by Kurt Knochner 28 Aug ‘15, 08:15