Filter to find the particular .jpg in the pcap?

retag add tags

For example, we have some pcap and in it we have images and I want to extract a particular image by its name like "name.jpg". What can I do in that case?

Assuming the image was transmitted over one of the support protocols, such as HTTP, you can use File -> Export Objects feature to save the image.

11.1k

cmaynard

answered 2022-12-01 15:36:25 +0000

edit flag offensive 0 remove flag delete link

Comments

thank you so much for reply actually i think i mentioned the question wrong REAL CASE : we have some pcap and in it we have images and I want to display a particular image file using display filter. What can I do in that case?

[email protected] (2022-12-02 00:15:29 +0000) edit

I want to display a particular image file using display filter

Then you'll have to use a display filter to find the packet and then export the object to a file, as explained by Chris Maynard, and then open that file in some tool that can display JPEGs. (Note that Wireshark is not such a tool, so you won't be able to display it in Wireshark.)

Guy Harris (2022-12-02 00:27:09 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Filter to find the particular .jpg in the pcap? edit

Comments

1 Answer

Comments