Beefy Boxes and Bandwidth Generously Provided by pair Networks
go ahead... be a heretic

parsing pcap-ng files

by kathys39 (Acolyte)
on Apr 10, 2012 at 15:51 UTC ( #964350=perlquestion: print w/replies, xml ) Need Help??
kathys39 has asked for the wisdom of the Perl Monks concerning the following question:

Has anyone had any luck parsing the new pcap-ng files from wireshark? Or netmon files? My client uses netmon to collect data, which I am trying to convert to normal libpcap file. I opened them in wireshark, but wireshark now only exports to pcap-ng. The net::Pcap modules seem to handle only pcap file, not the newer pcap-ng files. TIA for any help

Replies are listed 'Best First'.
Re: parsing pcap-ng files
by Anonymous Monk on Apr 26, 2012 at 20:20 UTC
    You need to upgrade libpcap libpcap-1.2.1 works for me on CentOS 6 Andrew Daviel
      You can also try to convert the pcap-ng file to libpcap format at
        Just convert it: editcap -F libpcap <file.pcapng> <file.pcap>

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: perlquestion [id://964350]
Approved by marto
Front-paged by Old_Gray_Bear
and the pool shimmers...

How do I use this? | Other CB clients
Other Users?
Others browsing the Monastery: (2)
As of 2018-03-18 06:19 GMT
Find Nodes?
    Voting Booth?
    When I think of a mole I think of:

    Results (228 votes). Check out past polls.