Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] pcap to Text? Strip out pcap header information -> raw hex dump

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Justin Barilar <pinemind@xxxxxxxxx>
Date: Mon, 9 Nov 2009 12:11:18 -0500

All,

I have a few pcap captures that were captured using snoop on a Linux machine. However, I'm looking to convert this pcap file to a raw dump of the bytes of the packets, hence removing all the pcap header information (global header, packet headers with timestamps).

I see there is a text2pcap function which is the opposite of what I want to do. Is there any utility to accomplish what I want to do?

Regards,

Justin
  • Follow-Ups:
    • Re: [Wireshark-users] pcap to Text? Strip out pcap header information -> raw hex dump
      • From: Jaap Keuter
    • Re: [Wireshark-users] pcap to Text? Strip out pcap header information -> raw hex dump
      • From: Sheahan, John
  • Prev by Date: Re: [Wireshark-users] Unknown OUI's...
  • Next by Date: Re: [Wireshark-users] pcap to Text? Strip out pcap header information -> raw hex dump
  • Previous by thread: Re: [Wireshark-users] Unknown OUI's...
  • Next by thread: Re: [Wireshark-users] pcap to Text? Strip out pcap header information -> raw hex dump
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation