Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

For each individual packet, you may select any item in the packet dissection pane (clicking on the packet in packet list pane is not enough) and then use File-> Export Packet Bytes to save the raw contents of the packet into a file.

Saving multiple packets into a signle file would make little sense even if you did that using some scrip parsing the pcap format because the length is not part of the packet data for all Ethernet packets (or it is rather an exception nowadays to have it there) so it would be difficult to parse such file.

For each individual packet, you may select any item in the packet dissection pane (clicking on the packet in packet list pane is not enough) and then use File-> Export File->Export Packet Bytes Bytes to save the raw contents of the packet into a file.

Saving multiple packets into a signle file would make little sense even if you did that using some scrip parsing the pcap format because the length is not part of the packet data for all Ethernet packets (or it is rather an exception nowadays to have it there) so it would be difficult to parse such file.