Wireshark-users: Re: [Wireshark-users] Where is hex2pcap
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Joerg Mayer <jmayer@xxxxxxxxx>
Date: Mon, 16 Mar 2009 18:20:11 +0100
On Mon, Mar 16, 2009 at 11:58:33PM +0700, giobuon@xxxxxxxxx wrote:
> I have a file exported from a TCP stream, it include few packet. And it
> isn't text so I can't using text2pcap tools. How can I read it using
> wireshark.
> It's something like that:

perl -n -e 's/([0-9a-fA-F]{2})/$1/g; print "000000 $_\n";' <hexdump.txt | text2pcap - hexdump.pcap
-- 
Joerg Mayer                                           <jmayer@xxxxxxxxx>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.