Re: pcap to Text? Strip out pcap header information -> raw hex dump

["Sheahan, John" <John.Sheahan () priceline com>]

I can probably do it with perl or ruby if you want to send me the text and give me an example of what you need.





From: wireshark-users-bounces () wireshark org [mailto:wireshark-users-bounces () wireshark org] On Behalf Of Justin 
Barilar
Sent: Monday, November 09, 2009 12:11 PM
To: wireshark-users () wireshark org
Subject: [Wireshark-users] pcap to Text? Strip out pcap header information -> raw hex dump

All,

I have a few pcap captures that were captured using snoop on a Linux machine. However, I'm looking to convert this pcap 
file to a raw dump of the bytes of the packets, hence removing all the pcap header information (global header, packet 
headers with timestamps).

I see there is a text2pcap function which is the opposite of what I want to do. Is there any utility to accomplish what 
I want to do?

Regards,

Justin

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe