Ethereal-users: Re: [Ethereal-users] Problems Importing TCPDUMP Output into Ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Ian Schorr <spamcontrol2@xxxxxxxxxxx>
Date: Fri, 11 Apr 2003 11:22:51 -0400
Richard,
The problem here is that you're creating a text file of some tcpdump-decoded output, and not creating a tcpdump-format binary capture file. You could possibly interpret the text file using the text2pcap tool, though that may be painful and missing a LOT of information. You'll probably want to save the file to libpcap/tcpdump format using the "-w" option, in which case you should be able to open the files natively with ethereal. 

Ian

Richard Ginski wrote:


On a Windows 2000 machine, we have been redirecting output from TCPDUMP to a text file. Unfortunately, when trying to open the files with Ethereal , we receive the error message:

"The file "filename" is not a capture file in a format Ethereal understand"

What could we be doing wrong?

We have tried Ethereal 0.9.7 and 0.9.11

Running TCPDUMP command:

tcpdump host "IP address" > text file

Thanks in advance for your help.

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users