This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Command line option for “save as”

0

Wireshark -w command line option defaults to pcap format. Need to save a Wireshark capture to a specific file with a specific format. Possible example: -w "filename" -F "format" where "format" defines the save as type. Is this possible? Thanks

asked 11 Nov '13, 15:03

JerryCape's gravatar image

JerryCape
11112
accept rate: 0%


One Answer:

1

If you're doing a live capture, either with Wireshark or with TShark, it can only be saved in pcap or pcap-ng format.

If you're using TShark or editcap to read a saved file in one format and write to a file in another format, you can use -F.

answered 11 Nov '13, 21:11

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%