I've been RTFM for several hours and trying all sorts of combinations of switches, but I staill can't figure out how to do the following: Read a standard pcap file in and output a hexdump of the packets WITHOUT the packet summary lines. If I write out the tex file using "tethereal -r pcap.in -T text -x > hex.out" and then go through and delete all those summary lines, I am then able to reread that hexdump file back in using "text2pcap hex.out new_pcap.out". I looked through the code and it appears to me that the "print_summary" option used in GTK is one of the very few that are not controlled using a 'preference option'. This print_summary is always hard-coded to true or false and can only get deselected via the GTK window. Is there some other way around this. Bascally I want the ability to move back and forth between binary pcap files and their hexdump equivalent. Thanks Kirk
Powered by MHonArc 2.6.10