Ethereal-users: [Ethereal-users] Non-binary Snoop-file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Fri, 28 Feb 2003 23:02:44 +0100
Is there any easy way of converting a non-binary snoop-file so that it can be readable by Ethereal?
I got a sniffing earlier today and want to have a look at immediately. 

The packets in the capture looks something like below (it's IP over Ethernet II)

    0: 0001 7151 ffe7 8811 22fa dd38 0800 4500    ..PPq... .-8..E.
   16: 0028 9911 4000 3c66 8880 ee1e 03cf ee10    .(..@.<.........
   32: 01ce 

I edited some selected frames (I did a global find and replace " 0:" with "0000:" etc. and then I put spaces between 
the octet data) and then I used text2pcap, but now I want to convert rest of the file automatically. 

Is there any way of doing this already or do I have to make some changes to text2pcap? 

   0000: 00 01 71 51 ff e7 88 11 22 fa dd 38 08 00 45 00    ..PPq... .-8..E.
   0010: 00 28 99 11 40 00 3c 66 88 80 ee 1e 03 cf ee 10    .(..@.<.........
   0020: 01 ce