GreyNoise
API Reference
Start typing to search…

Get Session PCAP

get
https://api.greynoise.io/v3/sessions//frames

Returns raw PCAP bytes for a single session. The response is a binary PCAP file suitable for analysis with tools like Wireshark.

Path Params
string
required

The unique session identifier.

Query Params
string
enum
Defaults to workspace

Controls the data scope for the query.

  • workspace: Query data from the current workspace (default). Requires the Sensors entitlement.
  • demo: Query demo/sample data. Requires the Swarm entitlement. Not available on export endpoints.
Allowed:
Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Updated 20 days ago

Language
Credentials
Header
URL
Response 
Click Try It! to start a request and see the response here! Or choose an example:
application/vnd.tcpdump.pcap
application/json
Updated 20 days ago