Subject: Re: A Question of File Input Formats From: Rob Austein <sra@hactrn.net> Message-Id: <20010208163029Z23523-220+248@thrintun.hactrn.net> Date: Thu, 8 Feb 2001 11:30:16 -0500
Perl code to encode or decode pcap format is not particularly hard.
For one example, see:
http://www.hactrn.net/hacks/fix-redhat-61-pcap/fix-rh61-pcap.pl
Shawn is correct that in general the information one needs is missing
from ASCII dumps, but one can often gleen enough information to be
useful. I've used this technique on ocasion to coax tcptrace into
drawing TSG graphs based on hex packet dumps mailed to me by customers
using home-grown analysis tools. Use with caution, but it beats the
heck out of staring at a screen full of hex digits for days on end.
----------------------------------------------------------------------------
To unsubscribe, send a message with body containing "unsubscribe tcptrace" to
majordomo@tcptrace.org.
This archive was generated by hypermail 2b30 : 02/08/01 EST