Wireshark-users: Re: [Wireshark-users] Extracting payload from ethernet dumps
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Simon Greifswald <edtfatr-ah@xxxxxx>
Date: Tue, 28 Sep 2010 12:35:12 +0200
Am Montag, 27. September 2010, 17:09:25 schrieb Estanislao Gonzalez:

> not completely sure, but I think "tcpdump -r file" will read from your
> file and dump some basic information.
> 
> You could rewrite it (I think) with -w new_file dumping only what you need.
> 
> Anyway, you should definitely check the man page of tcpdump (or online
> help if not in linux)

Thanks for answering.
tcpdump -w only strips link layer headers from the packets and tcpdump does 
not provide for other manipulation functions.

Armin