Tshark 2.4 New Feature - Command Line Export Objects, (Fri, Aug 18th)

There is nothing new about Wireshark releasing an update; however, the new 2.4 branch has new feature that is quite useful that I have been waiting to be able to use for a while. In case you missed it, tshark now has the ability to Export Objects. I have tested the export using large pcap files with multiple objects and tshark does a good job “dumping” all the files in the specified directory (i.e. destdir).

Article Link: https://isc.sans.edu/diary/rss/22734