LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Ethereal (reading packet captures) (https://www.linuxquestions.org/questions/linux-networking-3/ethereal-reading-packet-captures-17052/)

MrGreg 03-26-2002 04:01 PM

Ethereal (reading packet captures)
 
Is it possible to reconstruct, dechipher /etc. captured packets? I'm just trying to understand some idiosyncracies of a win box on my wire.

thanks,

manaskb 03-26-2002 07:18 PM

Re: Ethereal (reading packet captures)
 
Ethereal is a very powerful network analyser. For most protocols it is able to display the captured packets in detailed format, as well as hex format. Say for instance you have captured a IP packet, you will be able to see each field in the IP header in the detailed tree view by clicking on the captured packet in the display window. Actually it is pretty neat.

Checkout http://www.ethereal.com/docs/user-guide/x1634.html .

thanks,
manas


All times are GMT -5. The time now is 04:11 AM.