# Bro and Wireshark

**URL:** <https://community.zeek.org/t/bro-and-wireshark/4588>\
**Category:** Zeek\
**Created:** [January 11, 2017, 2:26pm UTC](https://community.zeek.org/t/bro-and-wireshark/4588 "2017-01-11T14:26:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Alberto\_Ciolini](https://avatars.discourse-cdn.com/v4/letter/a/9e8a1a/32.png) [@Alberto\_Ciolini](https://community.zeek.org/u/Alberto_Ciolini)\
**Post date:** [January 11, 2017, 2:26pm UTC](https://community.zeek.org/t/bro-and-wireshark/4588/1 "2017-01-11T14:26:19Z")

</div>

I was wondering if is there a way to take packets with bro from wireshark?

---

<div class="post-metadata">

**Author:** ![Jan](https://avatars.discourse-cdn.com/v4/letter/j/ce7236/32.png) [@Jan](https://community.zeek.org/u/Jan)\
**Post date:** [January 11, 2017, 2:31pm UTC](https://community.zeek.org/t/bro-and-wireshark/4588/2 "2017-01-11T14:31:57Z")

</div>

> I was wondering if is there a way to take packets with bro from wireshark?

Bro can read pcap files:  
[https://www.bro.org/sphinx/quickstart/#reading-packet-capture-pcap-files](https://www.bro.org/sphinx/quickstart/#reading-packet-capture-pcap-files)

Jan

---

<div class="post-metadata">

**Author:** ![Neslog](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@Neslog](https://community.zeek.org/u/Neslog)\
**Post date:** [January 11, 2017, 2:42pm UTC](https://community.zeek.org/t/bro-and-wireshark/4588/3 "2017-01-11T14:42:55Z")

</div>

Be sure to not save as pcap-ng.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/bro-and-wireshark/4588/4 "2022-05-06T15:44:28Z")

</div>