---
title: "Get PCAP Packets"
method: GET
path: "/connect/packets/{jobId}"
tags: ["Jobs"]
---

# Get PCAP Packets

`GET /connect/packets/{jobId}`

Retrieves the packets collected and attached to the job represented by the given job ID. This request assumes the job is a PCAP job.

## Path parameters

- `jobId` integer, required

## Query parameters

- `unwrap` boolean
- `offset` integer
- `count` integer

## Response `200`

The array of retrieved Packet objects

- ModelPacket[]
  - `acknowledge` integer — An optional packet sequence number this packet is acknowledging having been received
  - `checksum` integer — The packet checksum value, used for integrity checking
  - `dstIp` string — The packet destination IP address
  - `dstMac` string — The packet destination MAC address
  - `dstPort` integer — The packet destination port
  - `flags` string[] — The optional packet flags. Ex: SYN PSH FIN
  - `length` integer — The size of the packet, including headers.
  - `number` integer — The sequential packet number in the packet stream
  - `payload` string — The packet payload base64-encoded bytes
  - `payloadOffset` integer — The offset in the packet payload where the application-specific payload begins, if an application payload is applicable to this packet.
  - `sequence` integer — This packet's sequence number
  - `srcIp` string — The packet source IP address
  - `srcMac` string — The packet source MAC address
  - `srcPort` integer — The packet source port
  - `timestamp` string — The timestamp when the packet was captured
  - `type` string — The packet type. Note that Security Onion only supports specific packet types in the PCAP retrieval and viewing system.
  - `window` integer — The packet window size

## Other responses

- `400` — The provided input object or parameters are malformed or invalid
- `401` — Request was not properly authenticated
- `404` — The job was not found
- `500` — Internal SOC error; review SOC logs

---

[API](https://skmtc.net/security-onion-solutions/apis/security-onion-connect-api.md) · [All operations](https://skmtc.net/security-onion-solutions/apis/security-onion-connect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/security-onion-solutions/security-onion-connect-api/revisions/0576ce393f8d/schema)