---
title: "Download PCAPNG"
method: GET
path: "/samples/{sampleID}/{taskID}/dump.pcapng"
---

# Download PCAPNG

`GET /samples/{sampleID}/{taskID}/dump.pcapng`

## Request

- Base URL: `https://sandbox.recordedfuture.com/api/v0`
- URL: `https://sandbox.recordedfuture.com/api/v0/samples/{sampleID}/{taskID}/dump.pcapng`
- Auth: API key in header `Authorization`

Download the PCAPNG network capture from a behavioral task, including decrypted HTTPS via embedded TLS key logs.

## Path parameters

- `sampleID` string, required
- `taskID` string, required

## Response `200`

PCAPNG network capture file with decrypted HTTPS.

## Other responses

- `404`: Sample/task not found or PCAPNG not available.

---

[API](https://skmtc.dev/recordedfuture/apis/recorded-future-sandbox-api-secopsti.md) - [All operations](https://skmtc.dev/recordedfuture/apis/recorded-future-sandbox-api-secopsti/llms.txt) - [OpenAPI document](https://skmtc.dev/recordedfuture/apis/recorded-future-sandbox-api-secopsti/revisions/39ea918b1dca?raw)