Ethereal-users: Re: [Ethereal-users] Can I open and then export a file from the command line?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Thu, 14 Sep 2006 09:26:52 -0700
-------------------
The Ethereal project is being continued at a new site.  Please go to
http://www.wireshark.org and subscribe to wireshark-users@xxxxxxxxxxxxx.
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-users
-------------------

Linick, James (SED/WESTAR) wrote:
> -------------------
> The Ethereal project is being continued at a new site.  Please go to
> http://www.wireshark.org and subscribe to wireshark-users@xxxxxxxxxxxxx.
> Don't forget to unsubscribe from this list at
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> -------------------
> 
> Is it possible to open a tcpdump file and export it to a PDML file from
> the command line?

Sure!  First, upgrade to Wireshark.  As the message above indicates,
development under the name "Ethereal" has ceased.  Then use TShark to
read the file and print to pdml:

    tshark -nr /path/to/tcpdump_file.pcap -T pdml

The TShark manual page can be found online at

    http://www.wireshark.org/docs/man-pages/tshark.html

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users