Ask Your Question
0

How to copy a single field

asked 2022-11-18 16:47:23 +0000

gkerschb gravatar image

When viewing captured packets in the GUI, one can click e.g. on the 'Source' field of such a packet (it will then get marked by a dotted rectangle). Is there a way to copy only the contents of this field (in this case the IP address)? The right-click Menu command Copy always copies the whole packet in various formats.

edit retag flag offensive close merge delete

2 Answers

Sort by » oldest newest most voted
0

answered 2022-11-18 20:46:32 +0000

BigFatCat gravatar image

Did you try to copy the IP address from the details screen?

For more information, see the web page

https://www.wireshark.org/docs/wsug_h...

Section 6.2.3. Pop-up Menu Of The “Packet Details” Pane

edit flag offensive delete link more

Comments

I tried to copy it from the 'Packet List' pane. That is, click on a value in a row in a column. It gets dot-rectangled but i didn't find a way to copy just this value. It can't even be selected. Maybe I'm missing something since this is a very obvious feature. If you just want to copy the Source IP address to e.g. ping it you have first to copy the entire packet contents via the Copy right-click menu, paste it somewhere then copy just the info you want. Surely there must be an easier way.

gkerschb gravatar imagegkerschb ( 2022-11-18 21:22:56 +0000 )edit
0

answered 2022-11-18 21:22:13 +0000

gkerschb gravatar image

I tried to copy it from the 'Packet List' pane. That is, click on a value in a row in a column. It gets dot-rectangled but i didn't find a way to copy just this value. It can't even be selected. Maybe I'm missing something since this is a very obvious feature. If you just want to copy the Source IP address to e.g. ping it you have first to copy the entire packet contents via the Copy right-click menu, paste it somewhere then copy just the info you want. Surely there must be an easier way.

edit flag offensive delete link more

Comments

Have you tried what BigFatCat suggested? Thus instead of clicking in the 'Packet List' pane, right click in the 'Packet Details' pane?

In the 'Packet Details' pane, expand the treeview until it shows the field of interest, right click and select Copy | Value.

André gravatar imageAndré ( 2022-11-19 21:22:45 +0000 )edit

I've now tried it and it works. Thanks for the hint!

But I found it rather clumsy to click through the tree view in the 'Packet Details' pane until I got to the desired Information which I can see clearly in the 'Packet List' pane. Would it be feasible to make the fields in the 'Packet List' pane selectable? This would allow to copy them directly with fewer clicks. If that's a feature which would be approved by the developer community, I'll consider to contribute there.

gkerschb gravatar imagegkerschb ( 2022-11-21 08:32:01 +0000 )edit

Great that you want to contribute. See this page how to do that: https://www.wireshark.org/develop.html

But I found it rather clumsy to click through the tree view

Or use right-click and select 'Expand Subtrees' or 'Expand all'.

There is a work-around to copy the value from the 'Packet List' pane: select 'Prepare as filter' and then copy the value from the display filter bar. (Does not work on the 'Info' column.)

André gravatar imageAndré ( 2022-11-22 22:00:17 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2022-11-18 16:47:23 +0000

Seen: 1,931 times

Last updated: Nov 18 '22