Convert PCAP file to Text
July 21, 2009 2 Comments
I searched high and low on how to convert a Wireshark trace in pcap format into a text file. The only help I got, which really helped, was PCAP format file conversion. On command line, you have to run the following command:
tshark -V -r file_to_convert.pcap
It displays the trace as text. To save the output to file, I did the following on Windows 2003:
tshark -V -r file_to_convert.pcap > file_to_convert.txt
Of course, I am assuming you have tshark installed. Since I installed everything when I installed Wireshark, tshark was installed already.