Is there a way to get the data of a its element?

retag add tags

I am using intelligent transport systems (its) filter. According to documentation (https://www.wireshark.org/docs/dfref/...) I can filter any element of the its information. But, is there a way to get a dump of the whole its message?

Comments

A dump in what form, text, hex, something else?

grahamb (2020-06-11 08:03:22 +0000) edit

I need hex form

oca (2020-06-11 11:10:22 +0000) edit

add a comment see more comments

If you right-click on the protocol in the packet details pane, you can choose Copy -> ...as Hex Dump" or "Copy -> ...as Hex Stream". This will allow you to get the hex data for a particular packet.

If, on the other hand, you want the hex data for all packets, then maybe tshark -qx -r file.pcap might be of use, although that will give you the hex data for all layers of the packet and not the hex data for any one protocol of the packet.

11.1k

cmaynard

answered 2020-06-15 15:11:23 +0000

edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Is there a way to get the data of a its element? edit

Comments

1 Answer

Comments