Wireshark · Ethereal-dev: [Ethereal-dev] Re: [Ethereal-users] New User - How do I cpature/save Cisco Debugs For Analysis (forw

[Joerg Mayer <jmayer@xxxxxxxxx>]

How about adding this to the ethereal package?

    Ciao
             Jörg

----- Forwarded message from Marco van den Bovenkamp <marco@xxxxxxxxxxxxxxxxxxx> -----

Delivered-To: ethereal-users@xxxxxxxxxxxx
Cc: ethereal-users@xxxxxxxxxxxx
From: Marco van den Bovenkamp <marco@xxxxxxxxxxxxxxxxxxx>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.1a) Gecko/20020610
To: "Visser, Martin (Sydney)" <Martin.Visser@xxxxxx>
Original-CC: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] New User - How do I cpature/save Cisco Debugs
 For Analysis
Errors-To: ethereal-users-admin@xxxxxxxxxxxx
Precedence: bulk
Date: Thu, 20 Jun 2002 16:46:08 +0200

Visser, Martin (Sydney) wrote:

 > Of course if you can find a Cisco "debug xxx packet" command that
 > produces a sufficiently verbose hex-dump you may be able to use the
 > ethereal "text2pcap" utility to import the trace.

Try 'debug ip packet dump' (undocumented, sadly), and the following Perl 
script:

--------------- Cut here -----------------------

#!/usr/bin/perl

# Convert Cisco dump file format to something text2pcap can read.
# Author: Hamish Moffatt <hamish@xxxxxxxxxxxx>.
# License: GPL (see www.gnu.org).

sub dumppkt () {
     for ($i = 0; $i < scalar(@pkt); $i++) {
         if ($i % 16 == 0) {
             printf "\n%08X", $i;
         }

         printf " %02X", $pkt[$i];
     }

}

while(<>) {
     chomp;

     unless (m/[0-9A-F]{8}:/) {
         $new_pkt = 1;
         dumppkt;
         undef @pkt;
         next;
     }

     # Strip the offsets and ASCII dump
     $hex = substr $_, 10, 35;

     # Remove all spaces
     $hex =~ s/ //g;

     # Convert hex bytes on this line
     while ((length $hex) > 0) {
         push @pkt, hex (substr $hex, 0, 2, "");
     }

}

dumppkt;
print "\n";

--------------- Cut here ------------------

			Regards,

					Marco.


_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

----- End forwarded message -----

--
Joerg Mayer                                          <jmayer@xxxxxxxxx>
I found out that "pro" means "instead of" (as in proconsul). Now I know
what proactive means.