Well, not the answers I had hoped for, but about what I expected after
looking for a conversion tool for several hours with no luck.
Looks like I'll either re-run the captures or write my own tool, but I
expect simply running the tests again would be faster.
Thanks for the quick replies.
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Ulf Lamping
Sent: Tuesday, January 31, 2006 3:03 PM
To: Ethereal user support
Subject: Re: [Ethereal-users] Processing Text Output
Steve Licking wrote:
>
> Hi, I have several captures of the text output of tethereal (basically
> tethereal -V >textCaptureFile). The text is nicely formatted and has
> been easy enough to parse so far, but I would like to convert them
> into the libpcap format which Ethereal can read.
>
> However I have had little luck in finding a way to do this. The
> closest I've found is text2pcap, however since the text captures I
> have only give hex output for the packet data section, much of the
> information would be lost.
>
> Are there any utilities capable of parsing the text output of Ethereal
> and converting it into the libpcap format?
>
Hi!
I'm not 100% sure, but I would guess that you've lost valuable
information so importing this into Ethereal is simply not possible.
Ethereal is good at interpreting raw bytes, but interpreting the text
output is a very unusual way to do it (it *might* be possible in
principle, but no one would be willing to write such an import function).
I don't know of any import way, you'll stuck with your current files, I
fear.
You should use a "real" capture file format like libpcap for your
further experiments.
Regards, ULFL
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users