Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Maybe tshark can help a little with that, by using -Tfields and -e to export the field, which will contain the colon separated hex values of the UDP payload, e.g.

tshark -r test.pcapng -Tfields -e

You would probably need to convert the ascii hex stuff back to something binary afterwards, but it could do what you need.