HTTP History to PCAP

HTTP History to PCAP converts selected HTTP traffic from the Proxy HTTP History tab directly into PCAP (Packet Capture) files. This extension enables seamless analysis of HTTP communications in network analysis tools like Wireshark by generating properly formatted packet captures with complete TCP handshakes and teardowns.

Features

• Export selected HTTP request/response pairs from Proxy history to PCAP format
• Generate complete TCP conversations including handshake and teardown sequences
• Configurable port handling with option to force port 80 for improved Wireshark HTTP dissection
• Support for both real and simulated IP addresses in generated packets
• Proper packet timing preservation from original requests when available
• Chunked data transmission support for large HTTP payloads
• IPv4 and IPv6 address handling with automatic fallback mechanisms

Usage

1. Navigate to the Proxy HTTP History tab and select the traffic you want to export (use Ctrl+A to select all).
2. Right-click on the selected entries to open the context menu.
3. Choose "Extensions → HTTP History to PCAP → Export selected HTTP message(s) as PCAP".
4. Configure the export options in the dialog:
   • Filepath: Specify where to save the PCAP file (click Browse to select location)
   • Use port 80: Check to set server port to 80 for better Wireshark HTTP decoding, uncheck to preserve actual ports
   • Use real server IPs: Check to include actual server IP addresses, uncheck to use simulated local IPs
5. Click "OK" to generate the PCAP file with the selected HTTP traffic.
6. Open the generated PCAP file in Wireshark or other packet analysis tools for detailed traffic examination.