I am using intelligent transport systems (its) filter. According to documentation (https://www.wireshark.org/docs/dfref/...) I can filter any element of the its information. But, is there a way to get a dump of the whole its message?
If you right-click on the protocol in the packet details pane, you can choose Copy -> ...as Hex Dump" or "Copy -> ...as Hex Stream". This will allow you to get the hex data for a particular packet.
If, on the other hand, you want the hex data for all packets, then maybe tshark -qx -r file.pcap might be of use, although that will give you the hex data for all layers of the packet and not the hex data for any one protocol of the packet.
Asked: 2020-06-11 08:01:59 +0000
Seen: 209 times
Last updated: Jun 15 '20
A dump in what form, text, hex, something else?
I need hex form