How about adding this to the ethereal package?
Ciao
Jörg
----- Forwarded message from Marco van den Bovenkamp <[EMAIL PROTECTED]> -----
Delivered-To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
From: Marco van den Bovenkamp <[EMAIL PROTECTED]>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.1a) Gecko/20020610
To: "Visser, Martin (Sydney)" <[EMAIL PROTECTED]>
Original-CC: [EMAIL PROTECTED]
Subject: Re: [Ethereal-users] New User - How do I cpature/save Cisco Debugs
For Analysis
Errors-To: [EMAIL PROTECTED]
Precedence: bulk
Date: Thu, 20 Jun 2002 16:46:08 +0200
Visser, Martin (Sydney) wrote:
> Of course if you can find a Cisco "debug xxx packet" command that
> produces a sufficiently verbose hex-dump you may be able to use the
> ethereal "text2pcap" utility to import the trace.
Try 'debug ip packet dump' (undocumented, sadly), and the following Perl
script:
--------------- Cut here -----------------------
#!/usr/bin/perl
# Convert Cisco dump file format to something text2pcap can read.
# Author: Hamish Moffatt <[EMAIL PROTECTED]>.
# License: GPL (see www.gnu.org).
sub dumppkt () {
for ($i = 0; $i < scalar(@pkt); $i++) {
if ($i % 16 == 0) {
printf "\n%08X", $i;
}
printf " %02X", $pkt[$i];
}
}
while(<>) {
chomp;
unless (m/[0-9A-F]{8}:/) {
$new_pkt = 1;
dumppkt;
undef @pkt;
next;
}
# Strip the offsets and ASCII dump
$hex = substr $_, 10, 35;
# Remove all spaces
$hex =~ s/ //g;
# Convert hex bytes on this line
while ((length $hex) > 0) {
push @pkt, hex (substr $hex, 0, 2, "");
}
}
dumppkt;
print "\n";
--------------- Cut here ------------------
Regards,
Marco.
_______________________________________________
Ethereal-users mailing list
[EMAIL PROTECTED]
http://www.ethereal.com/mailman/listinfo/ethereal-users
----- End forwarded message -----
--
Joerg Mayer <[EMAIL PROTECTED]>
I found out that "pro" means "instead of" (as in proconsul). Now I know
what proactive means.
