Wireshark · Wireshark-users: Re: [Wireshark-users] Exporting raw packet data?

[Guy Harris <guy@xxxxxxxxxxxx>]

On Nov 13, 2006, at 5:52 PM, Pete Fraser wrote:

> I want to export packet data in raw format, so that I end up with a
> binary file.

"Raw" in what sense?

And what part of the packet data do you want to export?

And do you want to export from one packet, or multiple packets?

And, if it's multiple packets, to you just want to concatenate the  
data, or do you want some sort of record format to keep the data from  
different packets separated?

> What I want to do, but can't work out how, is to export a lot of
> packet data as a raw binary file.
> I develop the appropriate filter so that only the packets of interest
> are visible, then do File->Export->File..., select "All packets",
> "Displayed", and "Packet Bytes" for the only Packet Format. I would
> hope that I can then save as raw, but I only find ASCII, PS, XML,
> etc. What am I doing wrong?

What you're doing wrong is assuming that Wireshark has such a  
capability.

In order to add such a capability, we first need to know what it would  
do, hence the questions.