First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Is there any way to export a set of captured UDP packets as separate files with just the UDP payload?

  • retag add tags

I've captured some logs of MAVLink running over UDP, now I'd like to somehow export just the UDP payload bytes of each packet, separately, from wireshark to files. Preferably with something like filenames specifying source/origin IP and port. (Although in this particular case everything is on the same IP.)

seanrowens's avatar
1
seanrowens
asked 2018-12-04 03:40:40 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

0

Having Wireshark spit out individual files per frame is not something it can do (although for a datagram type protocol that wouldn't be strange thing, in order to preserve message boundaries).

One way to do this is to export the data as a text file (e.g., in JSON or PDML) and post process from there.

Jaap's avatar
13.7k
Jaap
answered 2018-12-04 06:57:09 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments
0

Maybe tshark can help a little with that, by using -Tfields and -e to export the data.data field, which will contain the colon separated hex values of the UDP payload, e.g.

tshark -r test.pcapng -Tfields -e data.data

You would probably need to convert the ascii hex stuff back to something binary afterwards, but it could do what you need.

Jasper's avatar
24.1k
Jasper
answered 2018-12-05 11:08:14 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer