Extraction of UDP data stream from pcap file

Question

how can i get udp data stream (in ascii format) of all packets captured in pcap file into a text file using tshark. I tried this

tshark -V -r /tmp/file_src.pcap > file_dst.txt

but how can i get only udp data stream?

Thanks

Answer 1

您可以使用tshark的-Y标志来指定过滤器

tshark -V -r /tmp/file_src.pcap -Y udp > file_dst.txt