On Fri, Aug 10, 2012 at 9:30 PM, JP <[email protected]> wrote: > Thanks so much getting NETSNIFF working on my CENTOS box.
So first of all, the 0.5.5 version is stone old. If possible, try to get a newer one. > I have PCAP files that were generated by DUMPCAP that I want to analyze. > > The problem is that NETSNIFF does not think it is valid PCAP file. > > ====================== > > # /usr/sbin/netsniff-ng -i > default-tune-wireshark-1.8.1-32MB-eth1_00003_20120809134556.cap Do you see something like ... $ file foo.pcap foo.pcap: tcpdump capture file (little-endian) - version 2.4 (Ethernet, capture length 65535) Could be that it is the newer format specification pcapng. Or, do you have endianess problems? Cheers, Daniel -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] http://netsniff-ng.org
