$ tethereal -x -r xxx.cap | grep '^[0-9a-f][0-9a-f][0-9a-f][0-9a-f] On 8/2/05, Kirk Anderson <kirk@xxxxxxxxxxxx> wrote: > I've been RTFM for several hours and trying all sorts of combinations of > switches, > but I staill can't figure out how to do the following: > > Read a standard pcap file in and output a hexdump of the packets WITHOUT > the packet summary lines. > > If I write out the tex file using "tethereal -r pcap.in -T text -x > > hex.out" and then go through and > delete all those summary lines, I am then able to reread that hexdump > file back in using > "text2pcap hex.out new_pcap.out". > > I looked through the code and it appears to me that the "print_summary" > option used in GTK is > one of the very few that are not controlled using a 'preference option'. > This print_summary is > always hard-coded to true or false and can only get deselected via the > GTK window. > > Is there some other way around this. Bascally I want the ability to move > back and forth between > binary pcap files and their hexdump equivalent. > > Thanks > > Kirk > > _______________________________________________ > Ethereal-users mailing list > Ethereal-users@xxxxxxxxxxxx > http://www.ethereal.com/mailman/listinfo/ethereal-users > -- This information is top security. When you have read it, destroy yourself. -- Marshall McLuhan
Powered by MHonArc 2.6.10