Wireshark-users: Re: [Wireshark-users] How can i export file from wireshark to display not in hex
From: Chris Maynard <Chris.Maynard@xxxxxxxxx>
Date: Thu, 17 Nov 2011 21:15:10 +0000 (UTC)
Meir Yanovich <meiry242@...> writes:

> Im tring to export file from wireshark,so i could search in it.now every
option i try doesn't give simple raw format as the tcp raw view , when i follow
tcp stream .all it gives me is hex view of the packets and the string in this
kind of format breaks and can't be searchable.
> i want it to export to searchable format. can it be done ? this is what im
getting now :0000  48 54 54 50 2f 31 2e 31 20 35 30 30 20 49 6e 74   HTTP/1.1
500 Int
> 0010  65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72   ernal Server Err
> 0020  6f 72 0d 0a 44 61 74 65 3a 20 54 68 75 2c 20 31   or..Date: Thu, 1
> 0030  30 20 4e 6f 76 20 32 30 31 31 20 31 36 3a 33 32   0 Nov 2011 16:32
> 0040  3a 35 37 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a   :57 GMT..Pragma:
> 0050  20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65    no-cache..Conte

What about copying & pasting the text directly from the "Follow TCP Stream" 
window?