wireshark_export_objects
Extract embedded files from network traffic using supported protocols like HTTP, SMB, TFTP, IMF, and DICOM. Specify a pcap file, protocol, and destination directory to export objects.
Instructions
[Export] Extract embedded files from traffic (HTTP, SMB, TFTP, etc.).
Args: pcap_file: Path to capture file protocol: Protocol type - 'http', 'smb', 'tftp', 'imf', 'dicom' dest_dir: Destination directory for extracted files
Returns: Success message or JSON error
Example: wireshark_export_objects("traffic.pcap", "http", "/tmp/exported")
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| dest_dir | Yes | ||
| protocol | Yes | ||
| pcap_file | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |