Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Exporting raw packet data?

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 13 Nov 2006 18:24:04 -0800

On Nov 13, 2006, at 5:52 PM, Pete Fraser wrote:

I want to export packet data in raw format, so that I end up with a
binary file.

"Raw" in what sense?

And what part of the packet data do you want to export?

And do you want to export from one packet, or multiple packets?

And, if it's multiple packets, to you just want to concatenate the data, or do you want some sort of record format to keep the data from different packets separated?

What I want to do, but can't work out how, is to export a lot of
packet data as a raw binary file.
I develop the appropriate filter so that only the packets of interest
are visible, then do File->Export->File..., select "All packets",
"Displayed", and "Packet Bytes" for the only Packet Format. I would
hope that I can then save as raw, but I only find ASCII, PS, XML,
etc. What am I doing wrong?

What you're doing wrong is assuming that Wireshark has such a capability.

In order to add such a capability, we first need to know what it would do, hence the questions.