Wireshark · Wireshark-users: [Wireshark-users] Help with Display Filters

["Renata Wowk" <renatamara@xxxxxxxxxxxxxx>]

Hi,

 

I need to create from a capture file, a new .pcap file with only the header information: data: tcp, ip and the ethernet header data.

 

The new file will have the same packet numbers from the original one, but only with the header data without the payload.

 

How can I create this filter at Wireshark ?

 

Thanks in advance,

 

Renata