|
kathys39 has asked for the
wisdom of the Perl Monks concerning the following question:
Has anyone had any luck parsing the new pcap-ng files from wireshark? Or netmon files? My client uses netmon to collect data, which I am trying to convert to normal libpcap file. I opened them in wireshark, but wireshark now only exports to pcap-ng. The net::Pcap modules seem to handle only pcap file, not the newer pcap-ng files.
TIA for any help
|
Re: parsing pcap-ng files
by Anonymous Monk on Apr 26, 2012 at 20:20 UTC |
You need to upgrade libpcap
libpcap-1.2.1 works for me on CentOS 6
Andrew Daviel | [reply] |
|
You can also try to convert the pcap-ng file to libpcap format at http://pcapng.com/
| [reply] |
|
Just convert it:
editcap -F libpcap <file.pcapng> <file.pcap>
| [reply] |
|
