Sessions
Export Session Data
Downloads session data as PCAP or raw payload for a single session. Use the type parameter to select the export format.
Not available when scope=demo (returns 403).
get/v3/sessions/{session_id}/export
Path parameters
session_idstring required
The unique session identifier.
Query parameters
scope'workspace' | 'demo'
Controls the data scope for the query.
- workspace: Query data from the current workspace (default). Requires the Sensors entitlement.
- demo: Query demo/sample data. Requires the Swarm entitlement. Not available on export endpoints.
type'pcap' | 'rawSource' | 'rawDestination'
Export format type.
Response
Session data file in the requested format.