Wireshark mailing list archives
A question regarding text2pcap
From: Michael Tuexen <Michael.Tuexen () lurchi franken de>
Date: Sat, 22 Dec 2012 22:04:14 +0100
Dear all, after adding support for pcapng to textpcap and fixing the support of the epb flags word for pcapng, I would like to add to text2pcap the capability to indicate in the input file per packet, if the packet was sent or received. text2pcap will than save this in the epb flags word when using pcapng. My question is how to realize this. One possibility would be to use a directive #TEXT2PCAP inbound 0000 01 02 03 .... #TEXT2PCAP outbound 0000 01 03 03 .... However, I would prefer a solution where the indication of inbound/outbound can be on the same line as the packet. (for some reason the producer of the file to be read by text2pcap normally provides each packet on a single (long) line). Any idea how to achieve this? Maybe using the directive at the beginning of the line? Any hints welcome! Best regards Michael ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- A question regarding text2pcap Michael Tuexen (Dec 22)
- Re: A question regarding text2pcap Jaap Keuter (Dec 23)
- Re: A question regarding text2pcap Michael Tuexen (Dec 25)
- Re: A question regarding text2pcap Jaap Keuter (Dec 23)