Re: tcptrace-bugs TCPTrace and Etherpeek

From: Shawn Ostermann (ostermann@cs.ohiou.edu)
Date: 05/16/02

  • Next message: Matt Muggeridge: "tcptrace-bugs mod_rttgraph.c - bug" 

    Message-Id: <200205161739.g4GHd3ZN009793@picard.cs.ohiou.edu>
From: "Shawn Ostermann" <ostermann@cs.ohiou.edu>
Subject: Re: tcptrace-bugs TCPTrace and Etherpeek 
Date: Thu, 16 May 2002 13:39:03 -0400

    > Is there a way to use TCPTrace to convert Etherpeek (.pkt) files to
    > a TCPDump (.dmp) format?

    Well, assuming that tcptrace can read the file that you have, the
    answer is yes. At one time, tcptrace could read etherpeek files, but
    I haven't tried with their newer formats. Assuming that it can read
    them, then you can do:

    tcptrace -O file.dmp file.pkt

    and you'll get a pcap (tcpdump) format output file. Tcptrace doesn't
    look at the frame-level, though, so that part will be invalid, but the
    IP/TCP/upper level stuff will have been converted.

    --sdo

    This archive was generated by hypermail 2b30 : 05/17/02 EDT