In this recipe we will talk about file operations such as save, export, print, and others.
We can save a whole file, and export specific data in various formats and file types. In the following paragraphs we will see how to do it.
To save a whole file with captured data, perform the following steps:
For saving a part of a file, for example, only the displayed data:
In all the options mentioned, you can choose the packets from the entire captured file, or from the packets displayed on the screen (packets displayed on the packet list after a displayed filter has been applied).
You can save the data captured by Wireshark in various formats, for further analysis with other tools.
You can save the file in the following formats:
*.txt
): export packet data into a plain text ASCII file.*.ps
): export packet data into PostScript format.*.csv
): export packet summary into CSV file format, to use it with spreadsheet programs (such as Microsoft Excel).*.c
): export packet bytes into C-Arrays so that it can be imported by C programs.*.psml
): export packet data into PSML, an XML-based format including only the packet summary. Further details about this format can be found at http://www.nbee.org/doku.php?id=netpdl:psml_specification.*.pdml
): export packet data into PDM, an XML-based format including the packet details. Further details about this format can be found at http://www.nbee.org/doku.php?id=netpdl:pdml_specification.To save the file, select Export Packet Dissections from the File menu, and you will get the following window:
In the preceding screenshot, in the marked box on the left-hand side, you choose the packets you want to save. The process is the same as in the previous recipe. In the marked box on the right-hand side, you choose the format of the file to be saved.
In order to print data, click on the Print button from the File menu, and you will get the following window:
In the Wireshark Print window, you have the following choices:
3.143.17.27