tcpdump mailing list archives
Re: windump options 4 writing in a *.txt file
From: Guy Harris <guy () alum mit edu>
Date: Tue, 13 Jul 2004 12:55:21 -0700
On Jul 13, 2004, at 12:44 PM, César Cárdenas wrote:
It is possible to write raw packets in a *.txt file?
That depends on what you mean by "raw packets". Packet data is binary, so that wouldn't go into a .txt file.The packet data can be dumped in hex and/or ASCII, and that could be put into a text file.
I've already tried with: windump -w test.txt windump -w "test.txt" windump -w test
The "-w" flag writes raw packets, which are in a form that is not text. It can be read by tcpdump/WinDump, Ethereal, Analyzer, and a number of other applications that read the libpcap capture file format.
If what you want is the textual dissection of the packet, such as would be printed if you ran tcpdump/WinDump with no command-line options, you could do
windump >test.txtIf you want the hex or ASCII dump of the raw packet data as text, you could try the "-x" and "-A" flags.
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Current thread:
- error-message "IP11 truncated-ip" in last tcpdump/libpcap Klaus Schrod (Jul 12)
- Re: error-message "IP11 truncated-ip" in last tcpdump/libpcap Guy Harris (Jul 12)
- Re: error-message "IP11 truncated-ip" in last tcpdump/libpcap Klaus Schrod (Jul 13)
- Re: error-message "IP11 truncated-ip" in last tcpdump/libpcap Guy Harris (Jul 13)
- Re: error-message "IP11 truncated-ip" in last tcpdump/libpcap Guy Harris (Jul 13)
- windump options 4 writing in a *.txt file César Cárdenas (Jul 13)
- Re: windump options 4 writing in a *.txt file Guy Harris (Jul 13)
- Only SYN César Cárdenas (Jul 22)
- Re: Only SYN Guy Harris (Jul 22)
- Re: error-message "IP11 truncated-ip" in last tcpdump/libpcap Klaus Schrod (Jul 13)
- Re: error-message "IP11 truncated-ip" in last tcpdump/libpcap Guy Harris (Jul 12)