Wireshark-users: Re: [Wireshark-users] opening a tcpdump file in wireshark

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 29 Apr 2009 23:29:38 -0700
(Don't send mail, other than automated subscribe/unsubscribe requests, to wireshark-users-request, or, for that matter, any *other* "- request" address. -request addresses are only for requests to subscribe to, or unsubscribe from, a mailing list.)

On Apr 29, 2009, at 11:19 PM, ram singh wrote:

can any one pl help me in opening a tcpdump file in wireshark. i have captured tcpdump file in one machine and i want to open it using wireshark in other machine.

Either

1) run Wireshark from the command line, with the "-r" flag, and with the argument to the "-r" flag being the pathname of the tcpdump file

or

2) run Wireshark and use the File > Open menu item and browse for the tcpdump file.

Wireshark's native file format is libpcap format, which is also the native file format of tcpdump, so one shouldn't need help to open a tcpdump file in Wireshark; it should Just Work. If it doesn't work, that's a bug; please report it as such, to http://bugs.wireshark.org/.