Wireshark · Ethereal-users: Re: [Ethereal-users] Processing Text Output

[LEGO <luis.ontanon@xxxxxxxxx>]

On 1/31/06, Steve Licking <slicking@xxxxxxxxxxxxxxx> wrote:
>
>
>
> Hi, I have several captures of the text output of tethereal (basically
> tethereal -V >textCaptureFile).  The text is nicely formatted and has been
> easy enough to parse so far, but I would like to convert them into the
> libpcap format which Ethereal can read.
>
> However I have had little luck in finding a way to do this.  The closest
> I've found is text2pcap, however since the text captures I have only give
> hex output for the packet data section, much of the information would be
> lost.
>
> Are there any utilities capable of parsing the text output of Ethereal and
> converting it into the libpcap format?
>

No, I think without the hexbytes there is no feasable way to do it

What you can do is to capture directly into a libpcap file using
tethereal's "-w filename.cap" option.


>
> Thanks for your help
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>
>


--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan