https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2925
Summary: EditCap and TShark cannot convert "NetScreen snoop text
file" format to libpcap; Wireshark can
Product: Wireshark
Version: 1.0.3
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: Normal
Priority: Medium
Component: TShark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: okrasz_news@xxxxx
Build Information:
TShark 1.0.3 (SVN Rev 26134)
Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GLib 2.14.6, with WinPcap (version unknown), with libz 1.2.3,
without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8, with ADNS, with
Lua 5.1, with GnuTLS 2.3.8, with Gcrypt 1.4.1, with MIT Kerberos.
Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5.
Built using Microsoft Visual C++ 6.0 build 8804
--
EditCap as well as TShark is not able to convert "NetScreen snoop text file" to
a libpcap format. Suprisingly Wireshark is able to do it (when you use "File ->
Save as"). Please try converting attached trace with following commands:
C:\>"Program Files\Wireshark\editcap.exe" -F libpcap NetScreen.txt t.pcap
editcap: Can't open or create t.pcap: Files from that network type can't be
save
d in that format
C:\>"Program Files\Wireshark\tshark.exe" -F libpcap -r NetScreen.txt -w t.pcap
tshark: The capture file being read can't be written in that format.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
