RE: [Ethereal-users] Processing Text Output

["Steve Licking" <slicking@xxxxxxxxxxxxxxx>]

Well, not the answers I had hoped for, but about what I expected after
looking for a conversion tool for several hours with no luck.

Looks like I'll either re-run the captures or write my own tool, but I
expect simply running the tests again would be faster.

Thanks for the quick replies.

-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Ulf Lamping
Sent: Tuesday, January 31, 2006 3:03 PM
To: Ethereal user support
Subject: Re: [Ethereal-users] Processing Text Output

Steve Licking wrote:
>
> Hi, I have several captures of the text output of tethereal (basically 
> tethereal -V >textCaptureFile). The text is nicely formatted and has 
> been easy enough to parse so far, but I would like to convert them 
> into the libpcap format which Ethereal can read.
>
> However I have had little luck in finding a way to do this. The 
> closest I've found is text2pcap, however since the text captures I 
> have only give hex output for the packet data section, much of the 
> information would be lost.
>
> Are there any utilities capable of parsing the text output of Ethereal 
> and converting it into the libpcap format?
>
Hi!

I'm not 100% sure, but I would guess that you've lost valuable 
information so importing this into Ethereal is simply not possible.

Ethereal is good at interpreting raw bytes, but interpreting the text 
output is a very unusual way to do it (it *might* be possible in 
principle, but no one would be willing to write such an import function).

I don't know of any import way, you'll stuck with your current files, I 
fear.

You should use a "real" capture file format like libpcap for your 
further experiments.

Regards, ULFL

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users