Ed Ravin wrote: > On Fri, Jan 14, 2005 at 03:43:06PM -0500, Sorrell, Al wrote: >>Unfortunately, I have the packet in hexdump (text) format... Series of >>hex words such as might be output from tcpdump/etehreal (it's actually >>being reported in a HP NNM error log as having bad data - as such it >>gives the packet info in hex/ASCII, but not a translation) > > If you have the entire packet in hex data, write a short program > to parse the hex, stuff it into a datagram, and send it back out on > a network interface, like a loopback or to a non-routable destination > IP. Sniff the interface with tcpdump/Ethereal, and now you can get it > parsed.
Ethereal ships with a text2pcap utility which was designed exactly for that: "Generate a capture file from an ASCII hexdump of packets". HTH, Thomas -- Thomas Anders (thomas.anders at blue-cable.de) Thanks to all for your suggestions! I have used Ethereal occasionally but wasn't aware of that utility. I'll give it a try! Al The contents of this e-mail and any attachments are intended solely for the use of the named addressee(s) and may contain confidential and/or privileged information. Any unauthorized use, copying, disclosure, or distribution of the contents of this e-mail is strictly prohibited by T.Rowe Price and may be unlawful. If you are not the intended recipient, please notify the sender immediately and delete this e-mail.
