Ethereal-dev: Re: Re : Re: [Ethereal-dev] particular snoop output

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Graeme Hewson <ghewson@xxxxxxxxxxxxxxxxxxx>
Date: Thu, 21 Oct 2004 20:27:54 +0100
Gilbert Ramirez wrote:
Have you tried running text2pcap, which comes with the Ethereal
distribution, to convert your hex dump to a pcap file?

--gilbert

That requires each line of the dump to include the offset within the packet (at least, that's my reading of the man page), and the Netscreen dump doesn't have this.