Beefy Boxes and Bandwidth Generously Provided by pair Networks
Pathologically Eclectic Rubbish Lister

parsing pcap-ng files

by kathys39 (Acolyte)
on Apr 10, 2012 at 15:51 UTC ( #964350=perlquestion: print w/replies, xml ) Need Help??
kathys39 has asked for the wisdom of the Perl Monks concerning the following question:

Has anyone had any luck parsing the new pcap-ng files from wireshark? Or netmon files? My client uses netmon to collect data, which I am trying to convert to normal libpcap file. I opened them in wireshark, but wireshark now only exports to pcap-ng. The net::Pcap modules seem to handle only pcap file, not the newer pcap-ng files. TIA for any help

Replies are listed 'Best First'.
Re: parsing pcap-ng files
by Anonymous Monk on Apr 26, 2012 at 20:20 UTC
    You need to upgrade libpcap libpcap-1.2.1 works for me on CentOS 6 Andrew Daviel
      You can also try to convert the pcap-ng file to libpcap format at
        Just convert it: editcap -F libpcap <file.pcapng> <file.pcap>

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: perlquestion [id://964350]
Approved by marto
Front-paged by Old_Gray_Bear
and all is quiet...

How do I use this? | Other CB clients
Other Users?
Others avoiding work at the Monastery: (7)
As of 2017-02-28 18:06 GMT
Find Nodes?
    Voting Booth?
    Before electricity was invented, what was the Electric Eel called?

    Results (407 votes). Check out past polls.