Wireshark-users: Re: [Wireshark-users] Exporting raw packet data?
From: Sake Blok <[email protected]>
Date: Tue, 14 Nov 2006 13:59:28 +0100
On Mon, Nov 13, 2006 at 09:02:41PM -1100, Hans Nilsson wrote:
> You could try saving it as a pcap-file and stripping out the headers. Or
> exporting only the packet bytes as plain-text and using sed, awk or any
> other tool to extract the right data.

Based on your challenge, I wrote a little perl-script that I think 
would do the trick.

The perl-script will take all udp-packets from a saved trace-file 
and will extract the udp-payload to a file. If you use (wire|t)shark 
to select only the UDP-stream that you want, I think it will produce 
exactly what you are looking for :)



Attachment: extract-udp-payload.pl
Description: Perl program