I'm sure this could be implemented using the Python bindings as the stored events contain the raw packet. Pcap conversion can also be used (it uses the same raw

I'm sure this could be implemented using the Python bindings as the stored events contain the raw packet. Pcap conversion can also be used (it uses the same raw packet) for reusing existing tools like Wireshark and (I'm not familiar with that but I guess that would work) existing custom protocol dissectors.