Ethereal-users: [Ethereal-users] Tethereal - how to save decode with -w option

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "John Ciukaj (jciukaj)" <jciukaj@xxxxxxxxx>
Date: Fri, 24 Feb 2006 14:59:27 -0500
Using tethereal, I have been unable to get the decoded RTP packets to be written to a libpcap file suitable for re-input to the ethereal GUI.
 
In the example below, the RTP packets are decoded from the 'original' udp libpcap file.  I want to save the decoded RTP stream to a new libpcap file but the file that is saved ends up being a copy of the original.  How do I do this?
 
tethereal -r original -d udp.port==9001,pcli -z conv,udp -d udp.port==30000,rtp -w save