ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] Where is hex2pcap

From: Joerg Mayer <jmayer@xxxxxxxxx>
Date: Mon, 16 Mar 2009 18:20:11 +0100
On Mon, Mar 16, 2009 at 11:58:33PM +0700, giobuon@xxxxxxxxx wrote:
> I have a file exported from a TCP stream, it include few packet. And it
> isn't text so I can't using text2pcap tools. How can I read it using
> wireshark.
> It's something like that:

perl -n -e 's/([0-9a-fA-F]{2})/$1/g; print "000000 $_\n";' <hexdump.txt | text2pcap - hexdump.pcap
-- 
Joerg Mayer                                           <jmayer@xxxxxxxxx>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.