Wireshark-users: Re: [Wireshark-users] Turn a data from a particular IP into a text file

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: j.snelders@xxxxxxxxxx
Date: Fri, 22 May 2009 14:44:36 +0200
Hi Nelson,

You can use Wireshark or TShark to do the job.

Wireshark:
Display filter: ip.addr==192.168.1.111

File -> Export -> File...
Packet Range: Displayed
Packet Format: Select All collapsed, As displayed or All expanded
Save as type: Plain text


TShark:
$ tshark -r test.pcap -R "ip.addr==192.168.1.111" -Vx > test.txt

Regards
Joan

On Fri, 22 May 2009 04:27:58 -0700 (PDT) Nelson wrote:

>Noob here...
>How can I take a data stream I have captured, filter for an IP address (in
>and out) and then grab all the packets and put them in a single text file?
> Thanks.