from the manpage:
NAME
text2pcap - Generate a capture file from an ASCII hexdump of packets
SYNOPSYS
text2pcap [ -h ] [ -d ] [ -q ] [ -o hex|oct ] [ -l typenum ] [ -e l3pid
] [ -i proto ] [ -m max-packet ]
[ -u srcport,destport ] [ -T srcport,destport ] [ -s
srcport,destport,tag ] [ -S srcport,destport,ppi ]
[ -t timefmt ] infile outfile
DESCRIPTION
Text2pcap is a program that reads in an ASCII hex dump and writes the
data described into a libpcap-style cap-
ture file. text2pcap can read hexdumps with multiple packets in them,
and build a capture file of multiple
packets. text2pcap is also capable of generating dummy Ethernet, IP and
UDP, TCP, or SCTP headers, in order to
build fully processable packet dumps from hexdumps of application-level
data only.
[ ... ]
/hannes
BinaryChen(TP/SH) wrote:
Hi Hannes,
Have you used the text2pcap? What function does it provide?
In its man page, it support change hexdump result to pcap format, but in
ASCII format.
I wonder to know what is hexdump'ed? The raw data or ...
Thanks a lot.
Binary Chen
------------------------------------------------------------------------
*From:* [EMAIL PROTECTED] ´ú±í Hannes Gredler
*Sent:* 2005-12-5 (ÐÇÆÚÒ») 16:07
*To:* tcpdump-workers@lists.tcpdump.org
*Subject:* Spam:Re: [tcpdump-workers] libpcap for PPP raw data problem
libpcap does not do what you want it to do ...
however you may want to look at the text2pcap utility
that is bundled with ethereal.
/hannes
BinaryChen(TP/SH) wrote:
> Hi,
>
> I have captured some raw PPP data from serial driver, and I want use
libpcap to convert to pcap file format so the ethereal can help me do
some analyze. Can anyone provide some sample or hints to me?
>
> Thanks a lot.
>
> Binary Chen
> -
> This is the tcpdump-workers list.
> Visit https://lists.sandelman.ca/ to unsubscribe.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
------------------------------------------------------------------------
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
