wireshark_export_objects
Extract embedded files from network traffic captured in pcap files using protocols like HTTP, SMB, TFTP, IMF, or DICOM. Specify protocol type and destination directory to save extracted files.
Instructions
[Export] Extract embedded files from traffic.
Args: protocol: Protocol type - 'http', 'smb', 'tftp', 'imf', 'dicom' dest_dir: Destination directory for extracted files
Returns: Success message or JSON error
Errors: FileNotFound: pcap_file does not exist InvalidParameter: Invalid protocol
Example: wireshark_export_objects("traffic.pcap", "http", "/tmp/exported")
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pcap_file | Yes | ||
| protocol | Yes | ||
| dest_dir | Yes |