First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Can I do a binary / Hex dump from wireshark ?

  • retag add tags

Hello Friends,

I loaded a .pcapng file and examined the packets of data. I am working on code that uses this data and so I want to write some test code to help with this task. One step I want to make is to simulate the raw binary data that I see in the wireshark. In the wireshark UK, I am talking about the third window which shows a binary dump of data in hex format. How can I copy this data? When I tried, it only copied a text ascii representation of what is shown in the wireshark window.

I installed a hex code editor plug-in into notepad++ so that I can edit hex data by hand. But that is time consuming as it editing any hex code by hand.

I hopened the .pcapng file in hex editior and maybe this is the way to go, but it seemed as if I was looking at something that required a learning curve.

Please advise.

xarzu's avatar
5
xarzu
asked 2022-01-19 17:30:58 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Are you looking to export the full packet or just a portion of it?

Chuckc's avatar Chuckc (2022-01-19 19:44:36 +0000) edit

both. The answer below works for both

xarzu's avatar xarzu (2022-01-20 05:39:12 +0000) edit
add a comment see more comments

1 Answer

0

You can export the whole frame by right-clicking on the "Frame" line in the packet details. Then choose for export packet bytes and choose a filename, the file will contain the binary data of the whole packet.

SYN-bit's avatar
18.5k
SYN-bit
answered 2022-01-19 19:54:48 +0000
edit flag offensive 0 remove flag delete link

Comments

good job. That works !

xarzu's avatar xarzu (2022-01-20 05:33:58 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer