Ethereal-users: Re: [Ethereal-users] binary capture

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Fri, 07 Oct 2005 06:18:48 +0200
Servando Garcia wrote:

I have to write a program to display the same output. My instructor told us in class to save the capture session in binary format then just convert binary to ascii. I have used the save option under the file menu and saved file type as libpcap. This does not save the file in binary format, when I use emacs/ textedit to view this file it is anything but binary.

The libpcap format *is* binary. Believe me or see: http://wiki.ethereal.com/Development/LibpcapFileFormat

You may see packet *content* being text, e.g. if you capture an HTTP stream while getting some text/html files. The content inside the libpcap file is not being encrypted or compressed or something like that, so you may see plain text packet content as, well, plain text.

Regards, ULFL