$ tethereal -x -r xxx.cap | grep '^[0-9a-f][0-9a-f][0-9a-f][0-9a-f]
On 8/2/05, Kirk Anderson <kirk@xxxxxxxxxxxx> wrote:
> I've been RTFM for several hours and trying all sorts of combinations of
> switches,
> but I staill can't figure out how to do the following:
>
> Read a standard pcap file in and output a hexdump of the packets WITHOUT
> the packet summary lines.
>
> If I write out the tex file using "tethereal -r pcap.in -T text -x >
> hex.out" and then go through and
> delete all those summary lines, I am then able to reread that hexdump
> file back in using
> "text2pcap hex.out new_pcap.out".
>
> I looked through the code and it appears to me that the "print_summary"
> option used in GTK is
> one of the very few that are not controlled using a 'preference option'.
> This print_summary is
> always hard-coded to true or false and can only get deselected via the
> GTK window.
>
> Is there some other way around this. Bascally I want the ability to move
> back and forth between
> binary pcap files and their hexdump equivalent.
>
> Thanks
>
> Kirk
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan