Ethereal-users: [Ethereal-users] file types for tethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Flowers, Jay" <Jay_Flowers@xxxxxxxxxx>
Date: Mon, 26 Nov 2001 14:56:26 -0500

I have been unable to open a capture file with tethereal and export it to a different file format.  I read the following snippet form the tethereal man page and assume that the bold words are the possible values for the -F argument.

 

When writing packets to a file, Tethereal, by default, writes the file in libpcap format, and writes all of the packets it sees to the output file. The -F flag can be used to specify the format in which to write the file; it can write the file in libpcap format (standard libpcap format, a modified format used by some patched versions of libpcap, or the format used by Red Hat Linux 6.1), snoop format, uncompressed Sniffer format, Microsoft Network Monitor 1.x format, and the format used by Windows-based versions of the Sniffer software.

 

The only value that has worked for me is libpcap.  I would like to export the file to one that is readable by Optimal.

 

C:>tethereal -F ? -r c:\temp\capture1.acp -w c:\temp\capture1.?

 

Anyone know how I can do this.  Sorry if I am blind, I am betting that the answer is under my nose.

 

Jay Flowers

Integic Health Care