Wireshark · Ethereal-dev: Re: [ethereal-dev] Is it easy to convert from one capture format to another?

[Guy Harris <guy@xxxxxxxxxx>]

> would it be easy to get Wiretap to convert from one format to another?
> 
> Could wiretap write out a capture file in another format?

It could probably be made to do so.

> Would it be easier to write a small utility that can convert from one
> format to another via wiretap?

"Easier", I'm not sure - to have wiretap write other capture file
formats out would require some way of telling wiretap the way to do
that, so there's a little less work involved in a utility that, say,
uses wiretap to read capture files, and writes them out itself.

In addition, if that's the *only* program that uses that capability, it
might better fit into the program than into wiretap; to use that in
Ethereal, say, would involve extra stuff in a "Save As..." menu item.

I've written such a program for a "libpcap" that reads multiple formats;
it wasn't particularly complicated, given enough information about the
file format in question to write out files in that format.