Ethereal-users: RE: [Ethereal-users] saved tcpdump file not opening with ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Francisco Alcoba (TS/EEM)" <francisco.alcoba@xxxxxxxxxxxx>
Date: Thu, 27 Jan 2005 08:07:08 +0100
Hi,
 
Use 'tcpdump -w file.cap' and open file.cap from ethereal.
 
'tcpdump -xl' will output a hexadecimal decode of the packets. What Ethereal understands is packets stored in libpcap format, where the raw bytes of the packets are stored, rather than their decoding in ASCII.
 
Regards,
 Francisco
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx]
Sent: miércoles, 26 de enero de 2005 18:11
To: ethereal-users@xxxxxxxxxxxx
Cc: Kevin_Belanger@xxxxxxxxxxxxxxxx
Subject: [Ethereal-users] saved tcpdump file not opening with ethereal


I've set up a captured file 'file.txt' on a solaris 8 machine using tcpdump -xl > file.txt.

When I try to use Windows 2000 ethereal 'file' 'open' 'file.txt' I get;



what did I do wrong?

Thanks

Frank Kenisky IV, CISSP, CISA, CISM
Information Technical Security Specialist
(210) 301- 6433 - (210) 887-6985