Ethereal-users: Re: [Ethereal-users] Non-binary Snoop-file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxx>
Date: Fri, 28 Feb 2003 14:13:51 -0800
On Fri, Feb 28, 2003 at 11:02:44PM +0100, Martin Regner wrote:
> Is there any way of doing this already

It might be possible to write a script in your favorite scripting
language to convert the file to a form text2pcap can handle.

> or do I have to make some changes to text2pcap? 
> 
>    0000: 00 01 71 51 ff e7 88 11 22 fa dd 38 08 00 45 00    ..PPq... .-8..E.
>    0010: 00 28 99 11 40 00 3c 66 88 80 ee 1e 03 cf ee 10    .(..@.<.........
>    0020: 01 ce 

It might be useful to have text2pcap capable of handling

	1) decimal rather than hex offsets (possibly octal offsets as
	   well);

	2) formats where there are spaces between 2-octet or 4-octet
	   clumps rather than octets

but it'd probably be easier, for one file, to do it with a script.