On Tue, Jun 19, 2007 at 10:55:32AM -0700, David DuPre wrote:
> Guy,
>
> I am running Wireshark (mergecap.exe) Version 0.99.5 (SVN Rev 20677)on WinXP and I need to automate the conversion of
> a *.cap file from TCPDump (AIX, and RHat) into Sniffer Pro 2.0 version of the file.
>
> Doing this from the GUI seems to work, but when I try this from the command line using "mergecap.exe" or "tshark.exe"
> I get this error:
>
> (tshark: The capture file being read can't be written in that format.)
>
> The command line I am using is:
>
> tshark -r top8_en0_w1ite_20070618_1700_NoNFS.cap -F ngwsniffer_2_0 -w outfile.cap
That command syntax works for me (WinXP, TShark 0.99.6-SVN-22043). But
maybe the tracefile you have behaves differently? Is it big? Is it
shareable? I could try it on my version of TShark to see if this error
is version-related?
Cheers,
Sake
