Daniel Rajer
Daniel Rajer

Reputation: 11

Convert from pcap to csv

I need to convert a file from PCAP format to CSV format. Furthermore, I also need to select only some packets (e.g. only the tcp or only the modbus) to export in CSV. Any solutions? Thx!

Upvotes: 1

Views: 11069

Answers (1)

graphite
graphite

Reputation: 2958

Wireshark can output dissected packets as .csv file.

  1. Open .pcap file with Wireshark.
  2. Filter packets you want to export.
  3. Go to File->Packet Dissections->As CSV ...
  4. Select Displayed in Packet Range if you want to export only filtered packets.
  5. Save your file.

You can do it with tshark as well if you prefer console. See @RossJacobs comment

Upvotes: 2

Related Questions