How to extract PCAP from your timeline

Users can download a PCAP from the currently selected protocol blocks within the Timeline.

  1. Open the desired project.
  2. View the Timeline.
  3. Within the Timeline, select one or more protocol blocks (hold down the SHIFT key to select additional protocols) or select a protocol row.
  1. Left-click on the Export Timeline Data button.
  1. Select the PCAP option.
  2. Select the Selected Traffic button to export the traffic to file.
TABLE OF CONTENTS