Wireshark-users: [Wireshark-users] Help with Display Filters
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Renata Wowk" <renatamara@xxxxxxxxxxxxxx>
Date: Tue, 15 Jan 2008 21:04:26 -0200
Hi,
 
I need to create from a capture file, a new .pcap file with only the header information: data: tcp, ip and the ethernet header data.
 
The new file will have the same packet numbers from the original one, but only with the header data without the payload.
 
How can I create this filter at Wireshark ?
 
Thanks in advance,
 
Renata