ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-users: Re: [Ethereal-users] Tethereal Question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 19 Jan 2006 13:01:29 -0800
FRANCIS PROVENCHER wrote:

I capture some packets, with the command;

tethereal -i xe0 > capture.cap

But when i try to re-importe from a Ethereal (Gui), it dose'nt recognized this format.

You didn't use the "-w" flag, you just redirected the standard output, so the format of "capture.cap" is a text file, with one line per packet, giving the same information as you'd get from the packet list in Ethereal.

If you want to capture packets in the standard capture file format Ethereal and Tethereal (and tcpdump and so on) use, do

	tethereal -i xe0 -w capture.cap