This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I want to scrape captured http packets for particular data. For example, consider a packet contains an itemID and ItemStatus.

I want a quick method of searching and extracting the timestamp, itemID, and ItemStatus from all the captured packets into a csv file for analysis (or whatever).

Is there a way to do this?

Thanks, David

asked 25 Sep '11, 12:34

Javaman's gravatar image

Javaman
1111
accept rate: 0%

The HTTP protocol has no itemID and itemStatus fields. You'll have to be more specific what these items are.

(25 Sep '11, 22:54) Jaap ♦
1

Are you looking for url's that contain certain values?
You can use a display filter to select the packets, that contain a those values:
http contains "itemid" || http contains "itemstatus"
In Packet Details right-click on Request URI and choose "Apply as Column" from the context menu.
Next select File | Export | File...
Save as type: select CSV
Packet Range: select Displayed
Add a file name and hit OK

(26 Sep '11, 00:27) joke

You can read more about exporting data in the wireshark User's Guide.

(26 Sep '11, 00:31) joke
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×248
×122
×1
×1

question asked: 25 Sep '11, 12:34

question was seen: 3,257 times

last updated: 26 Sep '11, 00:31

p​o​w​e​r​e​d by O​S​Q​A