You could try saving it as a pcap-file and stripping out the headers. Or exporting only the packet bytes as plain-text and using sed, awk or any other tool to extract the right data.
On Mon, 13 Nov 2006 17:52:21 -0800, "Pete Fraser" <[EMAIL PROTECTED]> said: > I'm new to Wireshark, so sorry if this is a dumb question. > > I want to export packet data in raw format, so that I end up with a > binary file. > > If the packets are TCP I can use Analyze->Follow TCP Stream then Save As > Raw. > For any type of packet, I can select packet data in the bottom pane > and do File->Export->Selected Packet Bytes. > > What I want to do, but can't work out how, is to export a lot of > packet data as a raw binary file. > I develop the appropriate filter so that only the packets of interest > are visible, then do File->Export->File..., select "All packets", > "Displayed", and "Packet Bytes" for the only Packet Format. I would > hope that I can then save as raw, but I only find ASCII, PS, XML, > etc. What am I doing wrong? > > Thanks in advance. > > > _______________________________________________ > Wireshark-users mailing list > [email protected] > http://www.wireshark.org/mailman/listinfo/wireshark-users -- Hans Nilsson [EMAIL PROTECTED] -- http://www.fastmail.fm - Same, same, but differentÂ… _______________________________________________ Wireshark-users mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-users
