Changes between Version 62 and Version 63 of FAQ


Ignore:
Timestamp:
11/07/12 21:08:48 (5 years ago)
Author:
aturner
Comment:

fix tshark faq

Legend:

Unmodified
Added
Removed
Modified
  • FAQ

    v62 v63  
    160160It turns out that there are quite a few capture file formats other then pcap.  If you have a capture file created by a tool which uses one of these other formats (like Solaris snoop) you can convert it to pcap format by using [http://www.wireshark.org Wireshark]'s tshark tool. 
    161161 
     162''tshark -r blah.snoop -w blah.pcap'' 
     163 
    162164=== Does Tcpreplay support Pcap-Ng/NTAR files? === 
    163165Yes.  The Tcpreplay suite uses [http://www.tcpdump.org libpcap] for reading & writing pcap files.  If you have libpcap 1.1.0 or higher, then tcpreplay, tcprewrite, etc can read pcap-ng files.  If you have an older version of libpcap, you should upgrade to the latest version as earlier versions of libpcap have bugs with pcap-ng files. 
    164  
    165 ''tshark -r blah.snoop -w blah.pcap'' 
    166166 
    167167=== Can tcpreplay send packets over !WiFi? ===