Ability to save pcap dump without prior setup

[kevin0t]

Sometimes we run multiple captures at a time to reproduce a traffic and on every capture we would have to repeatedly set the save location of the file and also rename it incase we already have multiple pcap saved there. It has also happened that , I've missed recording of some traffic as it occurred unexpectedly and couldn't be reproduced.

Maybe there was a way to export the pcap dump from the memory to storage.?

I leave it to the possibility of this ,being achievable technically or not. But it could be very useful as we often realize after the capture that the traffic was important to be recorded. Thanks :)

[emanuele-f]

Please note that #183 will simplify dumping to pcap file a lot. Regarding the ability to save the pcap dump without prior configuration, this is feasible but has some implications. In a similar way as it happens with the "full payload" mode, we could dump the packets to memory and add the ability to export them afterwards, e.g. for a specific connection. This adds some memory consumption overhead but it's feasible.

[byronigoe]

There seems to be some difference in communication when dump to file is enabled. When dump is set to None, the app I'm monitoring works. When dump is set to File, the app I'm monitoring shows a connection error.

If I could save part of the in-memory packet capture, the difference would be moot.

[emanuele-f]

There seems to be some difference in communication when dump to file is enabled. When dump is set to None, the app I'm monitoring works. When dump is set to File, the app I'm monitoring shows a connection error.

This is very strange, pcap dump does not affect how connections are handled

[volvox88]

Export a http response body to a file would be a great idea. PS: I'm dealing with image requests.

[emanuele-f]

Export a http response body to a file would be a great idea.

Please open a new issue and provide more details on your needs