210-255 · Question #172
Where do you navigate in Wireshark to download files?
The correct answer is D. File > Export Objects. Wireshark's 'File > Export Objects' menu allows analysts to reconstruct and download files transferred over protocols such as HTTP, SMB, and DICOM from a packet capture.
Question
Where do you navigate in Wireshark to download files?
Options
- AFile > Export text
- BFile > Export Binaries
- CFile > Export Files
- DFile > Export Objects
How the community answered
(23 responses)- A9% (2)
- C4% (1)
- D87% (20)
Why each option
Wireshark's 'File > Export Objects' menu allows analysts to reconstruct and download files transferred over protocols such as HTTP, SMB, and DICOM from a packet capture.
File > Export text (or 'Export Packet Dissections') saves human-readable dissection text, not binary file objects.
File > Export Binaries is not a valid menu option in Wireshark.
File > Export Files is not a valid menu option in Wireshark; the correct path uses 'Objects'.
The 'File > Export Objects' feature in Wireshark inspects reassembled protocol data and presents individual transferable objects - such as files downloaded over HTTP or shared via SMB - for extraction. This is the correct and only built-in path for recovering transferred files from a capture session.
Concept tested: Wireshark Export Objects for file extraction
Source: https://www.wireshark.org/docs/wsug_html_chunked/ChIOExportSection.html
Topics
Community Discussion
No community discussion yet for this question.