8000 GitHub - NanXiao/pcapng_to_pcap
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

NanXiao/pcapng_to_pcap

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

pcapng_to_pcap

tshark can convert pcapng file in which all packets were captured through one interface to pcap file. If the pcapng file contains multiple interfaces information, tshark will abort in the middle of conversion:

$ tshark -F pcap -r in.pcap -w out.pcap
tshark: Frame 99 of file "in.pcap" has a network type that differs from the network type of earlier packets, which isn't supported in a "Wireshark/tcpdump/... - pcap" file.

pcapng_to_pcap discards all interfaces information from pcapng file and save the packets as if they had been captured through Ethernet.

Dependency

Please install PcapPlusPlus before building pcapng_to_pcap. E.g., on macOS:

$ brew install pcapplusplus

Usage

Clone and run make, then:

$ pcapng_to_pcap in.pcapng out.pcap

About

No description, website, or topics provided.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published
0