On Jul 13, 2004, at 12:44 PM, César Cárdenas wrote:
It is possible to write raw packets in a *.txt file?
That depends on what you mean by "raw packets".
Packet data is binary, so that wouldn't go into a .txt file.
The packet data can be dumped in hex and/or ASCII, and that could be put into a text file.
I've already tried with:
windump -w test.txt windump -w "test.txt" windump -w test
The "-w" flag writes raw packets, which are in a form that is not text. It can be read by tcpdump/WinDump, Ethereal, Analyzer, and a number of other applications that read the libpcap capture file format.
If what you want is the textual dissection of the packet, such as would be printed if you ran tcpdump/WinDump with no command-line options, you could do
windump >test.txt
If you want the hex or ASCII dump of the raw packet data as text, you could try the "-x" and "-A" flags.
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
