Wireshark-users: Re: [Wireshark-users] Use tcpdump to capture for Wireshark?

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 24 Oct 2006 10:25:56 -0700
John Oliver wrote:

I redirected the output of tcpdump to an ASCII text file, but Wireshark
doesn't like that.  How can I capture traffic with tcpdump in a format
that Wireshark will understand?

By using the "-w" flag.  (That's also how you capture traffic with 
tcpdump in a format that tcpdump will understand, and that some other 
free and commercial tools will understand.  It's libpcap format, the 
same format that Wireshark/TShark uses.)