[Guy Harris <gharris@xxxxxxxxx>]

Luke wrote:

> How exactly do I need to call tethereal to get an ASCII dump instead  of 
> pcap binary format?  I looked through the output formatting  options, 
> but couldn't figure out one that would be ASCII.

Well, first of all, "ASCII" is a character code, not a format.  This 
mail message is ASCII, and so is ASCII art; just saying "ASCII" doesn't 
say enough about the format you want.

By *default*, tethereal writes to the standard output the summary 
information for the packet (i.e., the information you see in the packet 
list in Ethereal), as ASCII text (although it might include non-ASCII 
characters, e.g. UTF-8, at some point).  There's no formatting option 
for that - the *absence* of formatting options requests that ("-w" is 
the option used to request pcap binary format).

The "-V" option makes it write to the standard output the detailed 
dissection (i.e., the information you see in the packet detail pane in 
Ethereal).

You say you want Kerberos packets written as "ASN.1  decoded, in ASCII 
format".  I'm not sure what you mean by "ASN.1 decoded", but the 
detailed dissection of ASN.1-based protocols such as Kerberos is "ASN.1 
decoded", and if you enable the detailed display of ASN.1 information by 
passing the flag "-o ber.show_internals:true", it'll show the ASN.1 BER 
encoding information, not just the encoded data.

However, you later say you want "hex or ASCII packets outputted, one per 
line" - the detailed dissection doesn't put the packets out "one per 
line", as each packet requires several lines.