Wireshark · Wireshark-users: Re: [Wireshark-users] text2pcap

["Faten SOLTANI" <faten.soltani@xxxxxxxxxxxxxxxxxx>]

> Hi
the input file to Text2pcap must respect this structure bellow:

0000	85 06 40 01 00 00 02 01 00 00 01 0A 00 02 09 07 83 90 32 54 06 00 01
0000	85 06 40 01 00 00 02 01 00 00 01 0A 00 02 09 07 83 90 32 54 06 00 01
0000	85 05 80 01 00 00 02 0C 02 00 02 80 81
0000	85 06 40 01 00 00 02 10 00
0000	85 06 40 01 00 00 02 10 00
 the 4* "0" in the begening is an offset, it must be equal a 0 in the
begening of  each paket.
regards
Faten




>
> Message: 4
> Date: Wed, 6 May 2009 16:55:10 +0530 (IST)
> From: SuNeEl <seacore14@xxxxxxxxx>
> Subject: [Wireshark-users] text2pcap
> To: wireshark-users@xxxxxxxxxxxxx
> Message-ID: <944238.47837.qm@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
> Content-Type: text/plain; charset="utf-8"
>
> Hi all,
>
> why i am not able to convert my hexa dump file of rs232 data to pcap file
> using text2pcap utility ?
>
>
> --
>
> Happiness is like a Butterfly...
>
>
>
>       Now surf faster and smarter ! Check out the new Firefox 3 - Yahoo!
> Edition http://downloads.yahoo.com/in/firefox/?fr=om_email_firefox
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
> http://www.wireshark.org/lists/wireshark-users/attachments/20090506/e2dc3373/attachment.htm
>
> ------------------------------
>
> Message: 5
> Date: Wed, 6 May 2009 13:47:17 +0200
> From: "Anders Broman" <anders.broman@xxxxxxxxxxxx>
> Subject: Re: [Wireshark-users] [Suspected Spam]   text2pcap
> To: "Community support list for Wireshark"
> 	<wireshark-users@xxxxxxxxxxxxx>
> Message-ID:
> 	<E48F3A0F80C4B642BF6A5FF3257DFBB906A18D7E@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>
> Content-Type: text/plain; charset="us-ascii"
>
> Hi,
> Because you ar not doing it right :-)) possibly?
> Jokes aside text2pcap expects the data to be in the same format as the
> hex pane of Wireshark i think, something like:
> 0000 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 00 .....
> 0010 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00 00 .....
> :
> Regards
> Anders
>
> ________________________________
>
> From: wireshark-users-bounces@xxxxxxxxxxxxx
> [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of SuNeEl
> Sent: den 6 maj 2009 13:25
> To: wireshark-users@xxxxxxxxxxxxx
> Subject: [Suspected Spam] [Wireshark-users] text2pcap
>
>
> Hi all,
>
> why i am not able to convert my hexa dump file of rs232 data to pcap
> file using text2pcap utility ?
>
>
> --
>  <http://www.mylivesignature.com>
>
>
> Happiness is like a Butterfly...
>
>  <http://topmasala.com/images/geek2.gif>
>
>
> ________________________________
>
> Own a website.Get an unlimited package.Pay next to nothing.* Click
> here!.
> <http://in.rd.yahoo.com/tagline_ysb_website/*http://in.business.yahoo..c
> om/>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
> http://www.wireshark.org/lists/wireshark-users/attachments/20090506/84260057/attachment.htm
>
> ------------------------------
>
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> https://wireshark.org/mailman/listinfo/wireshark-users
>
>
> End of Wireshark-users Digest, Vol 36, Issue 10
> ***********************************************
>