diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0bebce73..40b3ef33 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -42,6 +42,8 @@
   match all requests that contain "dns" (case insensitive), but
   exclude all those contain the subscript "et info":
   https://github.com/jasonish/evebox/issues/275
+- [webapp] Selecting the PCAP for payload was returning the packet,
+  and vice-versa. Now fixed.
 
 ## 0.17.2 - 2023-05-27
 
diff --git a/webapp/src/EventView.tsx b/webapp/src/EventView.tsx
index 3daa5bce..ad031567 100644
--- a/webapp/src/EventView.tsx
+++ b/webapp/src/EventView.tsx
@@ -844,7 +844,7 @@ export function EventView() {
                   buffer={event()!._source.payload}
                   addOn={
                     <Button
-                      onclick={() => eventToPcap("packet")}
+                      onclick={() => eventToPcap("payload")}
                       style={PCAP_BUTTON_STYLE}
                     >
                       PCAP
@@ -864,7 +864,7 @@ export function EventView() {
                   buffer={event()!._source.packet}
                   addOn={
                     <Button
-                      onclick={() => eventToPcap("payload")}
+                      onclick={() => eventToPcap("packet")}
                       style={PCAP_BUTTON_STYLE}
                     >
                       PCAP