Extract nth Packet From a Pacp File

Question

Is there any command line tool to extract the n th packet from a pcap file?

I am on CentOS 6.5.

Thanks in advance.

Extract it and print it out, or extract it into a new pcap file? — , Nov 06 '14 at 23:37

score 2 · Accepted Answer · answered Nov 06 '14 at 08:37

2

Try

tshark -r file.pcap -R "frame.number == n"

Hope this was helpful.

answered Nov 06 '14 at 08:37

Eamonn Travers

1 Answers1