Ethereal-users: Re: [Ethereal-users] FW: How to print out the data which captured on Fig 10 (the

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Fri, 22 Nov 2002 07:56:39 +0100
Lee, Shih-Choa wrote:
>> Hi all,
>> I really like the ethereal software compare to the other free software,
>> but I don't know how to print out the data which we captured on the
>> ethernet (See Ethereal User's Guide: V1.1 for ethereal 0.9.7, Viewing
>> packets you have captured, Figure 10. Ethereal with a TCP segment selected
>> for viewing), on fig. 10, there are three segments on the window, I would
>> like to know how to pint out the bottom segment.

Select "Print detail" AND "Print hex data" from the "File/Print..." box and you will also get
the hex data in the printout. 
Below is one example:

Frame 2 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: 08:00:20:9f:f2:0f, Dst: 00:10:a4:fe:a8:3d
Internet Protocol, Src Addr: 130.230.52.42 (130.230.52.42), Dst Addr: 130.230.52.9 (130.230.52.9)
Transmission Control Protocol, Src Port: 3288 (3288), Dst Port: 45327 (45327), Seq: 1701576704, Ack: 4098607668, Len: 0

0000  00 10 a4 fe a8 3d 08 00 20 9f f2 0f 08 00 45 00   .....=.. .....E.
0010  00 3c e3 49 40 00 ff 06 2a 72 82 e6 34 2a 82 e6   .<.I@...*r..4*..
0020  34 09 0c d8 b1 0f 65 6c 00 00 f4 4b ca 34 a0 12   4.....el...K.4..
0030  27 98 1d 60 00 00 01 01 08 0a 0e 53 e1 27 02 39   '..`.......S.'.9
0040  c4 77 01 03 03 00 02 04 05 b4 7c 6b f5 e5         .w........|k..

Frame 3 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: 00:10:a4:fe:a8:3d, Dst: 08:00:20:9f:f2:0f
Internet Protocol, Src Addr: 130.230.52.9 (130.230.52.9), Dst Addr: 130.230.52.42 (130.230.52.42)
Transmission Control Protocol, Src Port: 45327 (45327), Dst Port: 3288 (3288), Seq: 4098607668, Ack: 1701576705, Len: 0

0000  08 00 20 9f f2 0f 00 10 a4 fe a8 3d 08 00 45 00   .. ........=..E.
0010  00 34 00 00 40 00 40 06 cc c4 82 e6 34 09 82 e6   .4..@.@.....4...
0020  34 2a b1 0f 0c d8 f4 4b ca 34 65 6c 00 01 80 10   4*.....K.4el....
0030  16 d0 59 ec 00 00 01 01 08 0a 02 39 c4 77 0e 53   ..Y........9.w.S
0040  e1 27        

In this case I have used "Print as displayed" option instead of "Expand all levels".

Regards,
  Martin