[Guy Harris <gharris@xxxxxxxxx>]

On Thu, Jun 12, 2003 at 09:46:24PM -0400, Joshua Wright wrote:
> Would it be possible to run the file though a "tethereal -v > foo",
> then use text2pcap to read the file back into a libpcap file?

That should work, if you give the right link-layer type with the "-l"
flag, and if text2pcap ignores the decoded packet data, and if you use
the "-x" and "-V" flags instead of the "-v" flag, and if that hex dump
format can be read by text2pcap.

You would also need to supply the right "-t" flag.

However, my first attempt at reading that output didn't succeed.  I have
not looked into why it didn't succeed, and don't expect to have time to
do so.