This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is there a straight forward way I can simply get a list of all the files that were downloaded during a Packet Capture session? e.g. Images, Videos, Files and so on?

Thanks

asked 25 Mar '17, 21:31

SirSwish's gravatar image

SirSwish
11114
accept rate: 0%


You didn't specify the protocol used to download files.

I guess you mean HTTP. If this is the case you can find a list of all captured requests in the "Statistics" -> "HTTP" -> "Requests" menu.

If you're using another protocol (e.g. FTP) please add more details to your question.

permanent link

answered 26 Mar '17, 03:01

Uli's gravatar image

Uli
9031515
accept rate: 29%

Hi,

Sorry about lack of detail, I'm kind of a novice at Wireshark. I was looking for something that could comprehensively list every file that was downloaded no matter the protocol, but at the very least HTTP, so thanks very much for the tip! ;) Just a quick clarifier if I may, does this include items that were fetched via HTTPS. If not is there an equivalent function for HTTPS?

Thanks

(26 Mar '17, 05:29) SirSwish

You also can try networkminer for such a task.

(26 Mar '17, 06:17) Christian_R

Thanks for the tip Christian. Unfortunately, the traffic is 802.11 and is encrypted. I have not been able to successfully convert the encyrpted PCAP file to a decrypted PCAP file thus far. and I wasn't able to find any WPA decryption functionality native to Network Miner.

(26 Mar '17, 06:54) SirSwish
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×26
×3
×2
×2

question asked: 25 Mar '17, 21:31

question was seen: 6,449 times

last updated: 26 Mar '17, 06:54

p​o​w​e​r​e​d by O​S​Q​A