Ethereal-users: Re: [Ethereal-users] ASCII Dump?
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
Luke wrote:
How exactly do I need to call tethereal to get an ASCII dump instead of
pcap binary format? I looked through the output formatting options,
but couldn't figure out one that would be ASCII.
Well, first of all, "ASCII" is a character code, not a format. This
mail message is ASCII, and so is ASCII art; just saying "ASCII" doesn't
say enough about the format you want.
By *default*, tethereal writes to the standard output the summary
information for the packet (i.e., the information you see in the packet
list in Ethereal), as ASCII text (although it might include non-ASCII
characters, e.g. UTF-8, at some point). There's no formatting option
for that - the *absence* of formatting options requests that ("-w" is
the option used to request pcap binary format).
The "-V" option makes it write to the standard output the detailed
dissection (i.e., the information you see in the packet detail pane in
Ethereal).
You say you want Kerberos packets written as "ASN.1 decoded, in ASCII
format". I'm not sure what you mean by "ASN.1 decoded", but the
detailed dissection of ASN.1-based protocols such as Kerberos is "ASN.1
decoded", and if you enable the detailed display of ASN.1 information by
passing the flag "-o ber.show_internals:true", it'll show the ASN.1 BER
encoding information, not just the encoded data.
However, you later say you want "hex or ASCII packets outputted, one per
line" - the detailed dissection doesn't put the packets out "one per
line", as each packet requires several lines.
