This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

# extract from pcap to csv using tshark

 2 If you are logged in as normal user (no admin rights), Windows will not let you write anything into C:\Program Files or any of its sub-directories. So please modify the destination file name to c:\Users\your_user_name\Documents\test.csv and try again.My qualified guess is that the reason why it worked for @Jasper was that he was (exceptionally) logged in using an account with administrator rights.answered 10 May '16, 13:48sindy 6.0k●4●8●51 accept rate: 24%No, it worked for me because I have the Wireshark installation directory in my path variable and ran tshark in my D:\Work\Traces directory :-)So I oversaw that I didn't use the same directory, and that it was the problem.(10 May '16, 13:51) Jasper ♦♦I just love to send an answer and find out that an identical one has already been posted twice in the meantime :-)(10 May '16, 13:55) sindy

 1 I just tried your command and it works fine for me. Maybe test.csv already existed and was open/locked by another program?answered 10 May '16, 13:27Jasper ♦♦ 23.8k●5●51●284 accept rate: 18%thanks for your response. there is no any test.csv file in C:\Program Files\Wireshark directory. and it Still does not work(10 May '16, 13:36) Khadidja Kha...1Try redirecting the output to C:\some\place\you\have\permission\to\write\to\test.csv.(10 May '16, 13:38) cmaynard ♦♦1Oh, you're doing it in the "C:\Program Files" path? Windows does not allow you to write files there without an elevated command prompt (which you should not use)Try writing the File to a location where you are allowed to create files, e.g. your Desktop.(10 May '16, 13:40) Jasper ♦♦1Because C:\Program Files\Wireshark isn't writable without elevated permission.(10 May '16, 13:40) grahamb ♦