Pre-requisites: Introduction to Wireshark
After capturing some packets or after opening a previously saved captured file and analyzing them, sometimes we need to print the details of the captured packets. To print the packets, click on the “File” menu and then select the “Print” menu item. This will bring up Wireshark‘s “Print” dialogue box.
From the above screenshot, we can see that the packet format frame is a part of the “Print” dialogue box.
Packet Format Frame:
Wireshark makes use of the pcapng report layout because of the default layout for saving captured packets. Very flexible, but may not be supported by other tools. Wireshark also supports the libpcap file format.
The options available in the Packet Format Frame perform the following operations:
- Summary line: Include a summary line for each package. The row contains the same fields as the package list.
- Details: Export or print the contents of the Packet Details.
- All collapsed: It exports or prints as if the “Packet Details” tree is in the “all collapsed” state.
- As displayed: It exports or prints as if the “Packet Details” tree is in the “as displayed” state.
- All expanded: It exports or prints as if the “Packet Details” tree is in the “all expanded” state.
- Bytes: It exports or prints the hex dumps of each packet in the “Packet Bytes” pane.
- Print each packet on a new page: While exporting, this will put a form feed character between each packet and put each packet on a separate page.
- Capture information header: It adds a header to each page with the capture filename and the number of total packets and shown packets.
Article Tags :