Beefy Boxes and Bandwidth Generously Provided by pair Networks
The stupid question is the question not asked
 
PerlMonks  

parsing pcap-ng files

by kathys39 (Acolyte)
on Apr 10, 2012 at 15:51 UTC ( #964350=perlquestion: print w/ replies, xml ) Need Help??
kathys39 has asked for the wisdom of the Perl Monks concerning the following question:

Has anyone had any luck parsing the new pcap-ng files from wireshark? Or netmon files? My client uses netmon to collect data, which I am trying to convert to normal libpcap file. I opened them in wireshark, but wireshark now only exports to pcap-ng. The net::Pcap modules seem to handle only pcap file, not the newer pcap-ng files. TIA for any help

Comment on parsing pcap-ng files
Re: parsing pcap-ng files
by Anonymous Monk on Apr 26, 2012 at 20:20 UTC
    You need to upgrade libpcap libpcap-1.2.1 works for me on CentOS 6 Andrew Daviel
      You can also try to convert the pcap-ng file to libpcap format at http://pcapng.com/
        Just convert it: editcap -F libpcap <file.pcapng> <file.pcap>

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: perlquestion [id://964350]
Approved by marto
Front-paged by Old_Gray_Bear
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others taking refuge in the Monastery: (5)
As of 2014-09-16 02:18 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    My favorite cookbook is:










    Results (155 votes), past polls