Ethereal-users: Re: [Ethereal-users] Using Text2pcap

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: LEGO <luis.ontanon@xxxxxxxxx>
Date: Thu, 8 Dec 2005 15:03:44 +0100
On 12/7/05, Joao Rosa <joao-p-rosa@xxxxxxxxxx> wrote:
> My goal is transforming a trace file from EWSD Telephonic Exchange (with
> q.931, CCS7 , H.323, Sip and other protocol) into a file that can be decoded
> by Ethereal ?
>
> My idea is using "text2pcap", in order to transform a trace from EWSD in
> ASCII file and afterwards run text2pcap and obtain a file that can be
> decoded by Ethereal.
>
> Can anyone tell me if it's possible to do that ?

With text2pcap you can certainly create  a pcap file from hexdumps in
log outputs, the problem you'll face is that the pcap file format
allows for only one encapsulation type per file.

That is either Ethernet (like it can be for H323), MTP2 (SS7) or LDAP
(Q931) not all of them in the same file.

--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan