Ask Your Question
0

how do you read wireshark capture files?

asked 2018-12-26 17:23:17 +0000

e.w. gravatar image

I would like to open a pre-captured wireshark file as http in order to extract data

edit retag flag offensive close merge delete

Comments

Can you rephrase your question, it doesn't seem to make any sense? Are you saying that you want to use Wireshark to extract http objects from a capture?

grahamb gravatar imagegrahamb ( 2018-12-26 17:47:55 +0000 )edit

So:

  • what do you mean by "open ... as http"?
  • what sort of data are you trying to extract?

The answer will probably depend on the answers to both of those questions.

Guy Harris gravatar imageGuy Harris ( 2018-12-26 20:39:18 +0000 )edit

I have been given a capture file which contains several packets which i believe are html. I need to find information from inside the files- some of which is readable from the packet details and some isn't. I can't work out how to open the packets and properly read the html inside.

e.w. gravatar imagee.w. ( 2018-12-26 21:31:06 +0000 )edit

If you are new to wireshark, you may be better off extracting the data you are looking for with Network Miner. Free edition should work for you, please take a look at netresec.com

net_tech gravatar imagenet_tech ( 2018-12-27 02:52:32 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-12-27 02:53:14 +0000

Guy Harris gravatar image

OK, from "read the html", it sounds as if you want to see the HTML documents that were downloaded (or uploaded).

Wireshark should show you the entire HTML document in the packet details window - there should be a "Line-based text data: text/html" entry below the "Hypertext Transfer Protocol" entry - but, if you want to get the HTML into a file, "use Wireshark to extract http objects from a capture" might work.

Open the capture file with Wireshark and select File > Export Objects > HTTP.... That should show a window with a list of packet numbers, host names, content types, sizes, and file names. Select one of them and click "Save"; it should give you a file dialog that lets you select where to save the file (HTML, GIF, JPEG, etc.).

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-12-26 17:23:17 +0000

Seen: 13,402 times

Last updated: Dec 27 '18