Nice help provided by you guys.
actually issue is I am capturing rs232 data using windows machine & it
logs data in text file(notepad ) I copy that file in linux and run your perl
script then it adds 0000 at the beginning of the file only .. and other lines
remains unchanged,
Seems linux vi editor considering whole file as 1 line only . so how can I
make vi to consider every line as new line .
--
Happiness is like a Butterfly...
--- On Sat, 9/5/09, Behdad Forghani <behdad.forghani@xxxxxxxxxxxxxx>
wrote:
From: Behdad Forghani <behdad.forghani@xxxxxxxxxxxxxx>
Subject: Re: [Wireshark-users] text2pcap
To: "Community support list for Wireshark"
<wireshark-users@xxxxxxxxxxxxx>
Date: Saturday, 9 May, 2009, 7:34 PM
A correction, I Perl the easiest way is:
open $input, "<$ARGV[0]" or die "Cannot open
$ARGV[0]";
while(<$input>)
{
print "0000 $_";
}
close $input;
On Sat, 2009-05-09 at 09:42 -0400, Behdad Forghani wrote:
> The fastest way is to open the file with vi or vim and type:
> :g/^/s//0000 /
> I.e., globally(everyline) substitute the beginning of line with
"0000 "
> This will do the trick.
>
> In Perl you can write x.pl with the code:
> open $input, "<$ARGV[0]" or die "Cannot open
$ARGV[0]";
> while(<$input>)
> {
> $_ =~ s/^/0000 /
> print $_
> }
> close $input;
>
> then run it as perl x.pl > out.txt
>
> Cheers
>
> On Sat, 2009-05-09 at 16:13 +0530, SuNeEl wrote:
> > thanx bro,
> >
> > but it seems very daunting task since I could not add 4*0 to a long
> > file pls. suggest some script or any way to achive the same. or any
> > RS232 logger that take care of that 0000
> >
> > pls suggest
> >
> > --
> >
> >
> > Happiness is like a Butterfly...
> >
> >
> >
> > --- On Thu, 7/5/09, Faten SOLTANI <faten.soltani@xxxxxxxxxxxxxxxxxx>
> > wrote:
> >
> > From: Faten SOLTANI <faten.soltani@xxxxxxxxxxxxxxxxxx>
> > Subject: Re:
[Wireshark-users] text2pcap
> > To: wireshark-users@xxxxxxxxxxxxx
> > Date: Thursday, 7 May, 2009,
12:45 PM
> >
> > > Hi
> > the input file to Text2pcap
must respect this structure
> > bellow:
> >
> > 0000 85 06 40 01
00 00 02 01 00 00 01 0A 00 02 09 07 83 90
> > 32 54 06 00 01
> > 0000 85 06 40 01
00 00 02 01 00 00 01 0A 00 02 09 07 83 90
> > 32 54 06 00 01
> > 0000 85 05 80 01
00 00 02 0C 02 00 02 80 81
> > 0000 85 06 40 01
00 00 02 10 00
> > 0000 85 06 40 01
00 00 02 10 00
> > the 4* "0" in the
begening is an offset, it must be equal a 0
> > in the
> > begening of each paket.
> > regards
> > Faten
> >
> >
> >
> >
> > >
> > > Message: 4
> > > Date: Wed, 6 May 2009
16:55:10 +0530 (IST)
> > > From: SuNeEl <seacore14@xxxxxxxxx>
> > > Subject:
[Wireshark-users] text2pcap
> > > To: wireshark-users@xxxxxxxxxxxxx
> > > Message-ID: <944238.47837.qm@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
> > > Content-Type:
text/plain; charset="utf-8"
> > >
> > > Hi all,
> > >
> > > why i am not able to
convert my hexa dump file of rs232 data
> > to pcap file
> > > using text2pcap utility
?
> > >
> > >
> > > --
> > >
> > > Happiness is like a Butterfly...
> > >
> > >
> > >
> > >
Now surf faster and smarter ! Check out the new
> > Firefox 3 - Yahoo!
> > > Edition
> > http://downloads.yahoo.com/in/firefox/?fr=om_email_firefox
> > > -------------- next part
--------------
> > > An HTML attachment was
scrubbed...
> > > URL:
> > >
> > http://www.wireshark.org/lists/wireshark-users/attachments/20090506/e2dc3373/attachment.htm
> > >
> > >
------------------------------
> > >
> > > Message: 5
> > > Date: Wed, 6 May 2009
13:47:17 +0200
> > > From: "Anders
Broman" <anders.broman@xxxxxxxxxxxx>
> > > Subject: Re:
[Wireshark-users] [Suspected Spam] text2pcap
> > > To: "Community
support list for Wireshark"
> > > <wireshark-users@xxxxxxxxxxxxx>
> > > Message-ID:
> > >
> > <E48F3A0F80C4B642BF6A5FF3257DFBB906A18D7E@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> > >
> > > Content-Type:
text/plain; charset="us-ascii"
> > >
> > > Hi,
> > > Because you ar not doing
it right :-)) possibly?
> > > Jokes aside text2pcap
expects the data to be in the same
> > format as the
> > > hex pane of Wireshark i
think, something like:
> > > 0000 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00
> > 00 .....
> > > 0010 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00
> > 00 .....
> > > :
> > > Regards
> > > Anders
> > >
> > > ________________________________
> > >
> > > From: wireshark-users-bounces@xxxxxxxxxxxxx
> > > [mailto:wireshark-users-bounces@xxxxxxxxxxxxx]
On Behalf Of
> > SuNeEl
> > > Sent: den 6 maj 2009
13:25
> > > To: wireshark-users@xxxxxxxxxxxxx
> > > Subject: [Suspected
Spam] [Wireshark-users] text2pcap
> > >
> > >
> > > Hi all,
> > >
> > > why i am not able to
convert my hexa dump file of rs232 data
> > to pcap
> > > file using text2pcap
utility ?
> > >
> > >
> > > --
> > > <http://www.mylivesignature.com>
> > >
> > >
> > > Happiness is like a
Butterfly...
> > >
> > > <http://topmasala.com/images/geek2.gif>
> > >
> > >
> > >
________________________________
> > >
> > > Own a website.Get an
unlimited package.Pay next to nothing.*
> > Click
> > > here!.
> > >
> > <http://in.rd.yahoo.com/tagline_ysb_website/*http://in.business.yahoo..c
> > > om/>
> > > -------------- next part
--------------
> > > An HTML attachment was
scrubbed...
> > > URL:
> > >
> > http://www.wireshark.org/lists/wireshark-users/attachments/20090506/84260057/attachment.htm
> > >
> > >
------------------------------
> > >
> > >
_______________________________________________
> > > Wireshark-users mailing
list
> > > Wireshark-users@xxxxxxxxxxxxx
> > > https://wireshark.org/mailman/listinfo/wireshark-users
> > >
> > >
> > > End of Wireshark-users
Digest, Vol 36, Issue 10
> > >
***********************************************
> > >
> >
> >
> >
___________________________________________________________________________
> > Sent via:
Wireshark-users mailing list
> > <wireshark-users@xxxxxxxxxxxxx>
> > Archives: http://www.wireshark.org/lists/wireshark-users
> > Unsubscribe:
> > https://wireshark.org/mailman/options/wireshark-users
> >
> > mailto:wireshark-users-request@xxxxxxxxxxxxxx?subject=unsubscribe
> >
> >
> >
> > ______________________________________________________________________
> > Own a website.Get an unlimited package.Pay next to nothing.* Click
> > here!.
> >
___________________________________________________________________________
> > Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> > Archives: http://www.wireshark.org/lists/wireshark-users
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> > mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
|