User Guide

Wireshark User's Guide
v
5.3. Saving captured packets ....................................................................................... 74
5.3.1. The "Save Capture File As" dialog box ........................................................ 75
5.3.2. Output File Formats .................................................................................. 76
5.4. Merging capture files .......................................................................................... 77
5.4.1. The "Merge with Capture File" dialog box .................................................... 78
5.5. Import text file ................................................................................................... 79
5.5.1. The "File import" dialog box ...................................................................... 80
5.6. File Sets ............................................................................................................ 81
5.6.1. The "List Files" dialog box ........................................................................ 82
5.7. Exporting data .................................................................................................... 82
5.7.1. The "Export as Plain Text File" dialog box ................................................... 83
5.7.2. The "Export as PostScript File" dialog box .................................................... 85
5.7.3. The "Export as CSV (Comma Separated Values) File" dialog box ...................... 87
5.7.4. The "Export as C Arrays (packet bytes) file" dialog box ................................... 87
5.7.5. The "Export as PSML File" dialog box ........................................................ 87
5.7.6. The "Export as PDML File" dialog box ........................................................ 89
5.7.7. The "Export selected packet bytes" dialog box ............................................... 91
5.7.8. The "Export Objects" dialog box ................................................................. 93
5.8. Printing packets .................................................................................................. 94
5.8.1. The "Print" dialog box .............................................................................. 94
5.9. The Packet Range frame ...................................................................................... 95
5.10. The Packet Format frame ................................................................................... 95
6. Working with captured packets ........................................................................................ 97
6.1. Viewing packets you have captured ....................................................................... 97
6.2. Pop-up menus .................................................................................................... 98
6.2.1. Pop-up menu of the "Packet List" column header ........................................... 98
6.2.2. Pop-up menu of the "Packet List" pane ....................................................... 100
6.2.3. Pop-up menu of the "Packet Details" pane ................................................... 102
6.3. Filtering packets while viewing ........................................................................... 104
6.4. Building display filter expressions ........................................................................ 105
6.4.1. Display filter fields ................................................................................. 106
6.4.2. Comparing values ................................................................................... 106
6.4.3. Combining expressions ............................................................................ 107
6.4.4. A common mistake ................................................................................. 108
6.5. The "Filter Expression" dialog box ....................................................................... 109
6.6. Defining and saving filters .................................................................................. 110
6.7. Defining and saving filter macros ......................................................................... 112
6.8. Finding packets ................................................................................................. 112
6.8.1. The "Find Packet" dialog box ................................................................... 112
6.8.2. The "Find Next" command ....................................................................... 113
6.8.3. The "Find Previous" command .................................................................. 113
6.9. Go to a specific packet ...................................................................................... 113
6.9.1. The "Go Back" command ........................................................................ 113
6.9.2. The "Go Forward" command .................................................................... 113
6.9.3. The "Go to Packet" dialog box .................................................................. 113
6.9.4. The "Go to Corresponding Packet" command ............................................... 113
6.9.5. The "Go to First Packet" command ............................................................ 114
6.9.6. The "Go to Last Packet" command ............................................................ 114
6.10. Marking packets .............................................................................................. 114
6.11. Ignoring packets .............................................................................................. 114
6.12. Time display formats and time references ............................................................ 115
6.12.1. Packet time referencing .......................................................................... 115
7. Advanced Topics ......................................................................................................... 117
7.1. Introduction ..................................................................................................... 117