 | 1 | initial version |
On Wireshark, I want to extract all the hex values from the section at the bottom into another file - but I don't know how to refer to it when using t shark.
tshark -r targetFile.pcapng -T fields -e _ws.col.Info > outFile.csv
here is the code I have, the -e is referring to the 'info' column of Wireshark but I want to extract the hex values at the bottom, what is the correct syntax for this?
please thank you
On Wireshark, I want to extract all the hex values from the section at the bottom into another file - but I don't know how to refer to it when using t shark.
tshark -r targetFile.pcapng -T fields -e _ws.col.Info > outFile.csv
here is the code I have, the -e is referring to the 'info' column of Wireshark but I want to extract the hex values at the bottom, what is the correct syntax for this?
please thank you
On Wireshark, for homework, i was given a captured pcap file from a USB and was told to identify a 'flag' which it contains.
I've researched the right code (Tshark) to use for this, however, I want don't know what field to refer to in order to extract all the hex values flag from it - I feel like it would be the section at hexadecimal values that need to be extracted for the bottom into another file - contents of the USB but I don't know how to refer to it when using t shark.tshark.
tshark -r targetFile.pcapng -T fields -e _ws.col.Info > outFile.csv
here is the code I have, the -e is referring to the 'info' column of Wireshark but I want to extract the hex values at the bottom, what is the correct syntax for this?
please thank you