5.7. Exporting data

Wireshark 2.1

5.7. Exporting data

5.7.1. The “Export as Plain Text File” dialog box

[Tip] Tip
  • Add the “Absolute date and time” column.
  • Temporarily hide all other columns.
  • Disable the EditPreferencesProtocolsData “Show not dissected data on new Packet Bytes pane” preference. More details are provided in Section 10.5, “Preferences”
  • Include the packet summary line.
  • Exclude column headings.
  • Exclude packet details.
  • Include the packet bytes.

5.7.2. The “Export as PostScript File” dialog box


5.7.3. The "Export as CSV (Comma Separated Values) File" dialog box

5.7.4. The "Export as C Arrays (packet bytes) file" dialog box

5.7.5. The "Export as PSML File" dialog box


5.7.6. The "Export as PDML File" dialog box

[Note] Note

5.7.7. The "Export selected packet bytes" dialog box


  • Name: the filename to export the packet data to.
  • The Save in folder: field lets you select the folder to save to (from some predefined folders).
  • Browse for other folders provides a flexible way to choose a folder.

5.7.8. The "Export Objects" dialog box


  • Packet num: The packet number in which this object was found. In some cases, there can be multiple objects in the same packet.
  • Hostname: The hostname of the server that sent the object as a response to an HTTP request.
  • Content Type: The HTTP content type of this object.
  • Bytes: The size of this object in bytes.
  • Filename: The final part of the URI (after the last slash). This is typically a filename, but may be a long complex looking string, which typically indicates that the file was received in response to a HTTP POST request.
  • Help: Opens this section in the user’s guide.
  • Close: Closes this dialog.
  • Save As: Saves the currently selected object as a filename you specify. The default filename to save as is taken from the filename column of the objects list.
  • Save All: Saves all objects in the list using the filename from the filename column. You will be asked what directory / folder to save them in. If the filename is invalid for the operating system / file system you are running Wireshark on, then an error will appear and that object will not be saved (but all of the others will be).