
Network Analysis using Wireshark Cookbook
By :

In this recipe we will talk about file operations such as save, export, print, and others.
Start Wireshark or open a saved file.
We can save a whole file, and export specific data in various formats and file types. In the following paragraphs we will see how to do it.
To save a whole file with captured data, perform the following steps:
For saving a part of a file, for example, only the displayed data:
In all the options mentioned, you can choose the packets from the entire captured file, or from the packets displayed on the screen (packets displayed on the packet list after a displayed filter has been applied).
You can save the data captured by Wireshark in various formats, for further analysis with other tools.
You can save the file in the following formats:
*.txt
): export packet data into a plain text ASCII file.*.ps
): export packet data into PostScript format.*.csv
): export packet summary into CSV file format, to use it with spreadsheet programs (such as Microsoft Excel).*.c
): export packet bytes into C-Arrays so that it can be imported by C programs.*.psml
): export packet data into PSML, an XML-based format including only the packet summary. Further details about this format can be found at http://www.nbee.org/doku.php?id=netpdl:psml_specification.*.pdml
): export packet data into PDM, an XML-based format including the packet details. Further details about this format can be found at http://www.nbee.org/doku.php?id=netpdl:pdml_specification.To save the file, select Export Packet Dissections from the File menu, and you will get the following window:
In the preceding screenshot, in the marked box on the left-hand side, you choose the packets you want to save. The process is the same as in the previous recipe. In the marked box on the right-hand side, you choose the format of the file to be saved.
In order to print data, click on the Print button from the File menu, and you will get the following window:
In the Wireshark Print window, you have the following choices:
The data can be printed in a text format, postscript (for postscript-aware printers), or to a file. After configuring this window and clicking on print, the regular printing window will appear and you can choose the printer.
Change the font size
Change margin width
Change background colour