From 7ceba5a0f3cbeb6ab15bc7f99aec87741ef177ea Mon Sep 17 00:00:00 2001 From: Sigma-Ohio Date: Sat, 7 Jun 2025 06:35:16 +0200 Subject: ich committe mit mienen besten --- executables/extract-pcap.sh | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 executables/extract-pcap.sh (limited to 'executables/extract-pcap.sh') diff --git a/executables/extract-pcap.sh b/executables/extract-pcap.sh new file mode 100644 index 0000000..6f3a5d3 --- /dev/null +++ b/executables/extract-pcap.sh @@ -0,0 +1,15 @@ +#!/bin/bash +# Usage: ./extract_udp_hex.sh input.pcap output.txt + +if [ "$#" -ne 2 ]; then + echo "Usage: $0 " + exit 1 +fi + +INPUT="$1" +OUTPUT="$2" + +# Extract UDP payloads as hex, one per line +tshark -r "$INPUT" -Y "udp" -T fields -e data > "$OUTPUT" + +echo "UDP hex streams written to $OUTPUT" \ No newline at end of file -- cgit v1.2.3-70-g09d2