extract-pcap.sh 319 B

123456789101112131415
  1. #!/bin/bash
  2. # Usage: ./extract_udp_hex.sh input.pcap output.txt
  3. if [ "$#" -ne 2 ]; then
  4. echo "Usage: $0 <input.pcap> <output.txt>"
  5. exit 1
  6. fi
  7. INPUT="$1"
  8. OUTPUT="$2"
  9. # Extract UDP payloads as hex, one per line
  10. tshark -r "$INPUT" -Y "udp" -T fields -e data > "$OUTPUT"
  11. echo "UDP hex streams written to $OUTPUT"