After importing PCAP for file extraction and analysis, I've noticed that Fiddler saves the file matching the file size to the content-length from the response headers entity with NULL bytes . When manually carving a file from PCAP and removing the headers, the file requested actually end up being an incomplete download. Is this something that Fiddler does by default? Is there a way to turn this feature off? Thank you.