Lee, Shih-Choa wrote:
>> Hi all,
>> I really like the ethereal software compare to the other free software,
>> but I don't know how to print out the data which we captured on the
>> ethernet (See Ethereal User's Guide: V1.1 for ethereal 0.9.7, Viewing
>> packets you have captured, Figure 10. Ethereal with a TCP segment selected
>> for viewing), on fig. 10, there are three segments on the window, I would
>> like to know how to pint out the bottom segment.
Select "Print detail" AND "Print hex data" from the "File/Print..." box and you will also get
the hex data in the printout.
Below is one example:
Frame 2 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: 08:00:20:9f:f2:0f, Dst: 00:10:a4:fe:a8:3d
Internet Protocol, Src Addr: 130.230.52.42 (130.230.52.42), Dst Addr: 130.230.52.9 (130.230.52.9)
Transmission Control Protocol, Src Port: 3288 (3288), Dst Port: 45327 (45327), Seq: 1701576704, Ack: 4098607668, Len: 0
0000 00 10 a4 fe a8 3d 08 00 20 9f f2 0f 08 00 45 00 .....=.. .....E.
0010 00 3c e3 49 40 00 ff 06 2a 72 82 e6 34 2a 82 e6 .<.I@...*r..4*..
0020 34 09 0c d8 b1 0f 65 6c 00 00 f4 4b ca 34 a0 12 4.....el...K.4..
0030 27 98 1d 60 00 00 01 01 08 0a 0e 53 e1 27 02 39 '..`.......S.'.9
0040 c4 77 01 03 03 00 02 04 05 b4 7c 6b f5 e5 .w........|k..
Frame 3 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: 00:10:a4:fe:a8:3d, Dst: 08:00:20:9f:f2:0f
Internet Protocol, Src Addr: 130.230.52.9 (130.230.52.9), Dst Addr: 130.230.52.42 (130.230.52.42)
Transmission Control Protocol, Src Port: 45327 (45327), Dst Port: 3288 (3288), Seq: 4098607668, Ack: 1701576705, Len: 0
0000 08 00 20 9f f2 0f 00 10 a4 fe a8 3d 08 00 45 00 .. ........=..E.
0010 00 34 00 00 40 00 40 06 cc c4 82 e6 34 09 82 e6 .4..@[email protected]...
0020 34 2a b1 0f 0c d8 f4 4b ca 34 65 6c 00 01 80 10 4*.....K.4el....
0030 16 d0 59 ec 00 00 01 01 08 0a 02 39 c4 77 0e 53 ..Y........9.w.S
0040 e1 27
In this case I have used "Print as displayed" option instead of "Expand all levels".
Regards,
Martin