Claude is much faster at extracting fields from a pcap and processing them with awk than I am!
Have you tried wireshark?
Have you tried wireshark?