I need to convert a file from PCAP format to CSV format. Furthermore, I also need to select only some packets (e.g. only the tcp or only the modbus) to export in CSV. Any solutions? Thx!
1 Answer
Wireshark can output dissected packets as .csv file.
- Open .pcap file with Wireshark.
- Filter packets you want to export.
- Go to File->Packet Dissections->As CSV ...
- Select Displayed in Packet Range if you want to export only filtered packets.
- Save your file.
You can do it with tshark as well if you prefer console. See @RossJacobs comment