 | 1 | initial version |
Maybe tshark can help a little with that, by using -Tfields and -e to export the data.data field, which will contain the colon separated hex values of the UDP payload, e.g.
tshark -r test.pcapng -Tfields -e data.data
You would probably need to convert the ascii hex stuff back to something binary afterwards, but it could do what you need.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.