Extract and concat packet bytes from multiple streams
I need to extract and merge packet bytes from ~3,000 separate packets. Each packet is part of a separate UDP stream. Export Packet Bytes lets me get the bytes from a single packet, but I need to extract and concat all the bytes from the multiple packets. I have a filter displaying only the packets of interest in sequential order.
Any help would be very much appreciated. Thank you and take care.
tshark -r "filename" -T fields -e udp.payload -Y "display filter"
Do you have a test case to verify the extraction is working?
Is this a common task or a one off? CyberChef can be handy for finessing the hex data.