Wireshark-users: [Wireshark-users] about convert pcapng to libpcap
Date Prev · Date Next · Thread Prev · Thread Next
From: evan fu <admail2@xxxxxxxxx>
Date: Thu, 1 Apr 2010 17:07:55 +0800
Hello -
 
not sure if someone could help on this,
 
I have a so large pcapgn file(+1.5G ) that I want to to convert it to libpcap and split it with several different pcap file,
 
what I did :
 
D:\ftp_boot\wireshark-1.3.4\host>editcap.exe -c 1000000 -F libpcap d:\ftp_boot\gg\1.pcapng d:\ftp_boot\gg\t1.pcap
editcap: Can't open or create d:\ftp_boot\gg\t1_00000_20100331130451.pcap: Files
 from that network type can't be saved in that format
 
D:\ftp_boot\wireshark-1.3.4\host>editcap.exe -c 1000000 -F pcapng d:\ftp_boot\gg\1.pcapng d:\ftp_boot\gg\t1.pcap

editcap: Can't open or create d:\ftp_boot\gg\t1_00000_20100331130451.pcap: Files
 from that network type can't be saved in that format


[root@Ark pp]# tshark -F pcapng -r 1.pcap -w 11.pcap


Running as user "root" and group "root". This could be dangerous.
tshark: The capture file being read can't be written in that format.

 
 
Does anyone know this problem? Thanks,