Message-Id: <200205161739.g4GHd3ZN009793@picard.cs.ohiou.edu> From: "Shawn Ostermann" <email@example.com> Subject: Re: tcptrace-bugs TCPTrace and Etherpeek Date: Thu, 16 May 2002 13:39:03 -0400
> Is there a way to use TCPTrace to convert Etherpeek (.pkt) files to
> a TCPDump (.dmp) format?
Well, assuming that tcptrace can read the file that you have, the
answer is yes. At one time, tcptrace could read etherpeek files, but
I haven't tried with their newer formats. Assuming that it can read
them, then you can do:
tcptrace -O file.dmp file.pkt
and you'll get a pcap (tcpdump) format output file. Tcptrace doesn't
look at the frame-level, though, so that part will be invalid, but the
IP/TCP/upper level stuff will have been converted.
This archive was generated by hypermail 2b30 : 05/17/02 EDT