Ask Your Question

How can I print the ethernet packet I see in Wireshark to a text file?

asked 2023-07-11 14:40:32 +0000

I have a device that only gives a status response on port 7000 when a request message comes in from port 7000. I am using a software to control this device and when I open the interface of this software, these request messages are automatically sent to the device and a response is received from the device. That is, when the control software is running (sending a request from port 7000 and replying from port 7000), this port is busy. I can view these packets in Wireshark. But since the software is running at that time (7000 port is busy), I cannot listen to this port with any other software. How does Wireshark display these packets? How can I print these packets that I view in Wireshark to a text file?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2023-07-11 18:22:44 +0000

Jaap gravatar image

There are two questions here.

First is answered by this article which basically explains how packet capture can be inserted in the network stack. npcap takes care of this. On Unix based systems this paper forms the basis for packet capture.

The second question can be answered by the use of tshark rather than Wireshark. It generates text output using the save dissectors as Wireshark uses.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2023-07-11 14:40:32 +0000

Seen: 118 times

Last updated: Jul 11 '23