Beefy Boxes and Bandwidth Generously Provided by pair Networks
Problems? Is your data what you think it is?

parsing pcap-ng files

by kathys39 (Acolyte)
on Apr 10, 2012 at 15:51 UTC ( #964350=perlquestion: print w/ replies, xml ) Need Help??
kathys39 has asked for the wisdom of the Perl Monks concerning the following question:

Has anyone had any luck parsing the new pcap-ng files from wireshark? Or netmon files? My client uses netmon to collect data, which I am trying to convert to normal libpcap file. I opened them in wireshark, but wireshark now only exports to pcap-ng. The net::Pcap modules seem to handle only pcap file, not the newer pcap-ng files. TIA for any help

Comment on parsing pcap-ng files
Replies are listed 'Best First'.
Re: parsing pcap-ng files
by Anonymous Monk on Apr 26, 2012 at 20:20 UTC
    You need to upgrade libpcap libpcap-1.2.1 works for me on CentOS 6 Andrew Daviel
      You can also try to convert the pcap-ng file to libpcap format at
        Just convert it: editcap -F libpcap <file.pcapng> <file.pcap>

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: perlquestion [id://964350]
Approved by marto
Front-paged by Old_Gray_Bear
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others examining the Monastery: (8)
As of 2015-11-25 09:02 GMT
Find Nodes?
    Voting Booth?

    What would be the most significant thing to happen if a rope (or wire) tied the Earth and the Moon together?

    Results (672 votes), past polls