Ethereal-users: [Ethereal-users] Non-binary Snoop-file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Fri, 28 Feb 2003 23:02:44 +0100
Is there any easy way of converting a non-binary snoop-file so that it can be readable by Ethereal?
I got a sniffing earlier today and want to have a look at immediately. 

The packets in the capture looks something like below (it's IP over Ethernet II)

    0: 0001 7151 ffe7 8811 22fa dd38 0800 4500    ..PPq... .-8..E.
   16: 0028 9911 4000 3c66 8880 ee1e 03cf ee10    .(..@.<.........
   32: 01ce 

I edited some selected frames (I did a global find and replace " 0:" with "0000:" etc. and then I put spaces between 
the octet data) and then I used text2pcap, but now I want to convert rest of the file automatically. 

Is there any way of doing this already or do I have to make some changes to text2pcap? 

   0000: 00 01 71 51 ff e7 88 11 22 fa dd 38 08 00 45 00    ..PPq... .-8..E.
   0010: 00 28 99 11 40 00 3c 66 88 80 ee 1e 03 cf ee 10    .(..@.<.........
   0020: 01 ce