First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

How to copy a single field

When viewing captured packets in the GUI, one can click e.g. on the 'Source' field of such a packet (it will then get marked by a dotted rectangle). Is there a way to copy only the contents of this field (in this case the IP address)? The right-click Menu command Copy always copies the whole packet in various formats.

gkerschb's avatar
1
gkerschb
asked 2022-11-18 16:47:23 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

0

I tried to copy it from the 'Packet List' pane. That is, click on a value in a row in a column. It gets dot-rectangled but i didn't find a way to copy just this value. It can't even be selected. Maybe I'm missing something since this is a very obvious feature. If you just want to copy the Source IP address to e.g. ping it you have first to copy the entire packet contents via the Copy right-click menu, paste it somewhere then copy just the info you want. Surely there must be an easier way.

gkerschb's avatar
1
gkerschb
answered 2022-11-18 21:22:13 +0000
edit flag offensive 0 remove flag delete link

Comments

Have you tried what BigFatCat suggested? Thus instead of clicking in the 'Packet List' pane, right click in the 'Packet Details' pane?

In the 'Packet Details' pane, expand the treeview until it shows the field of interest, right click and select Copy | Value.

André's avatar André (2022-11-19 21:22:45 +0000) edit

I've now tried it and it works. Thanks for the hint!

But I found it rather clumsy to click through the tree view in the 'Packet Details' pane until I got to the desired Information which I can see clearly in the 'Packet List' pane. Would it be feasible to make the fields in the 'Packet List' pane selectable? This would allow to copy them directly with fewer clicks. If that's a feature which would be approved by the developer community, I'll consider to contribute there.

gkerschb's avatar gkerschb (2022-11-21 08:32:01 +0000) edit

Great that you want to contribute. See this page how to do that: https://www.wireshark.org/develop.html

But I found it rather clumsy to click through the tree view

Or use right-click and select 'Expand Subtrees' or 'Expand all'.

There is a work-around to copy the value from the 'Packet List' pane: select 'Prepare as filter' and then copy the value from the display filter bar. (Does not work on the 'Info' column.)

André's avatar André (2022-11-22 22:00:17 +0000) edit
add a comment see more comments
0

Did you try to copy the IP address from the details screen?

For more information, see the web page

https://www.wireshark.org/docs/wsug_h...

Section 6.2.3. Pop-up Menu Of The “Packet Details” Pane

BigFatCat's avatar
31
BigFatCat
answered 2022-11-18 20:46:32 +0000
edit flag offensive 0 remove flag delete link

Comments

I tried to copy it from the 'Packet List' pane. That is, click on a value in a row in a column. It gets dot-rectangled but i didn't find a way to copy just this value. It can't even be selected. Maybe I'm missing something since this is a very obvious feature. If you just want to copy the Source IP address to e.g. ping it you have first to copy the entire packet contents via the Copy right-click menu, paste it somewhere then copy just the info you want. Surely there must be an easier way.

gkerschb's avatar gkerschb (2022-11-18 21:22:56 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer