Ask Your Question
0

Filter to find the particular .jpg in the pcap?

asked 2022-12-01 10:27:21 +0000

venkatchaitanya752@gmail.com gravatar image

updated 2022-12-01 15:44:05 +0000

cmaynard gravatar image

For example, we have some pcap and in it we have images and I want to extract a particular image by its name like "name.jpg". What can I do in that case?

edit retag flag offensive close merge delete
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2022-12-01 15:36:25 +0000

cmaynard gravatar image

Assuming the image was transmitted over one of the support protocols, such as HTTP, you can use File -> Export Objects feature to save the image.

edit flag offensive delete link more

Comments

thank you so much for reply actually i think i mentioned the question wrong REAL CASE : we have some pcap and in it we have images and I want to display a particular image file using display filter. What can I do in that case?

venkatchaitanya752@gmail.com gravatar image[email protected] ( 2022-12-02 00:15:29 +0000 )edit

I want to display a particular image file using display filter

Then you'll have to use a display filter to find the packet and then export the object to a file, as explained by Chris Maynard, and then open that file in some tool that can display JPEGs. (Note that Wireshark is not such a tool, so you won't be able to display it in Wireshark.)

Guy Harris gravatar imageGuy Harris ( 2022-12-02 00:27:09 +0000 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2022-12-01 10:27:21 +0000

Seen: 4,192 times

Last updated: Dec 01 '22