Print .pcap file content on cosole/file that should be similar as Wire shark

[subrat2008]

Hi
I need Code that Print .pcap file content on cosole/file that should be similar with as Wire shark works.

Thanks.

[Banfa]

If you can not find a utility to do this, Wireshark itself has a basic export to text file.

If that wont do then you can access the data through the winpcap library or the file format is available here for you to decode the file yourself directly.

A lot of the information displayed by Wireshare is not stored in the file. Rather Wireshark decodes the packet data itself using its own stored database of transport protocol knowledge to determine the data.

[seladb]

You didn't mention what programming language you're using. But if C++ fits you, you can use PcapPlusPlus - it has both pcap reading and packet printing (quite similar to Wireshark) features. See the following code example:

// open the pcap file
PcapFileReaderDevice pcapReader("/your/pcap/file/path.pcap");
pcapReader.open();
RawPacket rawPacket;
 
// go over all packet in file
while (pcapReader.getNextPacket(rawPacket))
{
    // parse the packet
    Packet packet(&rawPacket);
 
    // print packet as string to stdout (you can print it to a file, stream, etc.)
    std::cout << packet.printToString() << "\n\n";
}
 
// close the pcap file
pcapReader.close();