Ethereal-users: Re: [ethereal-users] Reading tcpdump(8) output files in ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Fri, 9 Jul 1999 09:22:21 -0500
On Fri, Jul 09, 1999 at 09:01:47AM -0500, Fabrice Gamberini wrote:
> 
> 
> 
> Hello,
> 
> I have installed ethereal (rpm for 0.6.1-1) on a RedHat5.2 linux box, in
> order to trace some ppp stuff. Actually, the ppp data is captured by
> tcpdump whenever ppp0 is up.
> 
> I have read that ethereal is able to read "packet data from a pcap/tcpdump
> formatted capture file" (from the man file). but when I launch
> ethereal -r trace.txt
> (where trace.txt i sthe result of 'tcpdump -l -i ppp0 -x -s200 -v')
> ethereal barfs out that it can't load the file...

Use the "-w" option to tcpdump. It saves the packets in a binary format.
Ethereal reads this binary file.

--gilbert