Beefy Boxes and Bandwidth Generously Provided by pair Networks
Welcome to the Monastery

parsing pcap-ng files

by kathys39 (Acolyte)
on Apr 10, 2012 at 15:51 UTC ( #964350=perlquestion: print w/replies, xml ) Need Help??
kathys39 has asked for the wisdom of the Perl Monks concerning the following question:

Has anyone had any luck parsing the new pcap-ng files from wireshark? Or netmon files? My client uses netmon to collect data, which I am trying to convert to normal libpcap file. I opened them in wireshark, but wireshark now only exports to pcap-ng. The net::Pcap modules seem to handle only pcap file, not the newer pcap-ng files. TIA for any help

Replies are listed 'Best First'.
Re: parsing pcap-ng files
by Anonymous Monk on Apr 26, 2012 at 20:20 UTC
    You need to upgrade libpcap libpcap-1.2.1 works for me on CentOS 6 Andrew Daviel
      You can also try to convert the pcap-ng file to libpcap format at
        Just convert it: editcap -F libpcap <file.pcapng> <file.pcap>

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: perlquestion [id://964350]
Approved by marto
Front-paged by Old_Gray_Bear
and all is quiet...

How do I use this? | Other CB clients
Other Users?
Others surveying the Monastery: (9)
As of 2018-01-17 12:24 GMT
Find Nodes?
    Voting Booth?
    How did you see in the new year?

    Results (198 votes). Check out past polls.