Wireshark-users: Re: [Wireshark-users] Use tcpdump to capture for Wireshark?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 24 Oct 2006 10:25:56 -0700
John Oliver wrote:

I redirected the output of tcpdump to an ASCII text file, but Wireshark
doesn't like that.  How can I capture traffic with tcpdump in a format
that Wireshark will understand?
By using the "-w" flag. (That's also how you capture traffic with tcpdump in a format that tcpdump will understand, and that some other free and commercial tools will understand. It's libpcap format, the same format that Wireshark/TShark uses.)