ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] problem in captured file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 16 Aug 2003 17:05:33 -0700
On Mon, Aug 11, 2003 at 09:42:30PM +0430, Masoud Kalali wrote:
> I build a nightly version of ethereal.
> but it say --The file "c:\dump.txt" is not a capture file in a format 
> Ethereal understands----
> filke format is snoop format one
> and i make it by tethereal.exe with switch -F snoop

What was the exact command you used to produce the file?  The ".txt"
makes me suspect it's a text file, not a snoop file.  To use "-F snoop"
with Tethereal to produce a snoop file, you also have to use the "-w"
flag - if you run Tethereal without the "-w" flag, it just produces a
textual dissection of the packets, not a binary packet capture file that
Ethereal or Tethereal can read.