Wireshark · Ethereal-users: Re: [Ethereal-users] Problems Importing TCPDUMP Output into Ethereal

[Ian Schorr <spamcontrol2@xxxxxxxxxxx>]

Richard,

The problem here is that you're creating a text file of some 
tcpdump-decoded output, and not creating a tcpdump-format binary capture 
file.  You could possibly interpret the text file using the text2pcap 
tool, though that may be painful and missing a LOT of information.  
You'll probably want to save the file to libpcap/tcpdump format using 
the "-w" option, in which case you should be able to open the files 
natively with ethereal.

Ian

Richard Ginski wrote:

> On a Windows 2000 machine, we have been redirecting output from TCPDUMP to a text file. Unfortunately, when trying to open the files with Ethereal , we receive the error message:
>
> "The file "filename" is not a capture file in a format Ethereal understand"
>
> What could we be doing wrong?
>
> We have tried Ethereal 0.9.7 and 0.9.11
>
> Running TCPDUMP command:
>
> tcpdump host "IP address" > text file
>
> Thanks in advance for your help.
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>