Ask Your Question
0

Is there a way to get the data of a its element?

asked 2020-06-11 08:01:59 +0000

oca gravatar image

I am using intelligent transport systems (its) filter. According to documentation (https://www.wireshark.org/docs/dfref/...) I can filter any element of the its information. But, is there a way to get a dump of the whole its message?

edit retag flag offensive close merge delete

Comments

A dump in what form, text, hex, something else?

grahamb gravatar imagegrahamb ( 2020-06-11 08:03:22 +0000 )edit

I need hex form

oca gravatar imageoca ( 2020-06-11 11:10:22 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-06-15 15:11:23 +0000

cmaynard gravatar image

If you right-click on the protocol in the packet details pane, you can choose Copy -> ...as Hex Dump" or "Copy -> ...as Hex Stream". This will allow you to get the hex data for a particular packet.

If, on the other hand, you want the hex data for all packets, then maybe tshark -qx -r file.pcap might be of use, although that will give you the hex data for all layers of the packet and not the hex data for any one protocol of the packet.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2020-06-11 08:01:59 +0000

Seen: 194 times

Last updated: Jun 15 '20