Ethereal-users: Re: [Ethereal-users] view capture after printing to file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 13 Jan 2003 11:05:11 -0800
On Mon, Jan 13, 2003 at 10:44:17AM -0500, Jim Schulze wrote:
> Is it in any way possible to view within the ethereal gui a capture
> that had not been saved as a capture file, but was printed to file with
> the detail and expand all options set?

Only if you also used the "Print hex data" option, in which case you
could perhaps use text2pcap to read the printed output and convert the
hex data into the packet binary data.  (That wouldn't work for all
link-layer types - some of them have "pseudo-headers" that don't show up
in the packet data.  Ethernet isn't one of those types, so if it was an
Ethernet capture that might be possible.)