Wireshark-bugs: [Wireshark-bugs] [Bug 2868] EditCap and TShark cannot convert some file formats
Chris Maynard
changed
bug 2868
| What |
Removed |
Added |
| Attachment #10740 Flags |
|
review_for_checkin?
|
Comment # 7
on bug 2868
from Chris Maynard
Created attachment 10740 [details]
Patch to allow some files to be saved as pcap files.
This patch against SVN trunk r49218 doesn't help resolve this bug per se, but
I'm hoping it will help someone else resolve it. What it does do is to allow
some files, unfortunately not iptrace files, to be filtered and saved as a pcap
file again, or to be piped to another tshark instance. I only tested it with
normal pcap files as input.
Example 1:
Before:
tshark.exe -F libpcap -r infile.pcap -2 -R "filter" -w outfile.pcap
tshark: The capture file being read can't be written as a "libpcap" file.
After:
<File outfile.pcap is successfully generated.>
Example 2:
Before:
tshark: The capture file being read can't be written as a "libpcap" file.
Capturing on 'Standard input'
<Nothing else>
After:
tshark.exe -F libpcap -r infile.pcap -2 -R "filter1" -w - | tshark.exe -i - -Y
"filter2"
Capturing on 'Standard input'
<Expected matching packet output here.>
Attempting to pipe the packets to Wireshark still doesn't work though.
You are receiving this mail because:
- You are the assignee for the bug.
- You are watching all bug changes.
