extract_objects
Extract files from HTTP, SMB, DICOM, IMF, and TFTP streams in PCAP/PCAPNG files using tshark.
Instructions
Extract files from HTTP/SMB/DICOM/IMF/TFTP streams using tshark.
Args: file_path: Path to PCAP/PCAPNG file protocol: Protocol to extract objects from (http, smb, dicom, imf, tftp) output_dir: Directory to write extracted files (created if empty)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| file_path | Yes | ||
| protocol | No | http | |
| output_dir | No |