LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 05-28-2008, 09:35 AM   #1
abefroman
Senior Member
 
Registered: Feb 2004
Location: lost+found
Distribution: CentOS
Posts: 1,430

Rep: Reputation: 55
How can I generate a pcap file?


How can I generate a pcap file?

Is this possible with tcpdump? I see its -F option is only for reading the input options from a file, and the -r reads from a file. Is there a way to get it to output to a file in the pcap binary format?

Or is there another tool besides tcpdump that can do that?
 
Old 05-28-2008, 10:12 AM   #2
maverick_awp
Member
 
Registered: Oct 2006
Location: Mumbai, India
Posts: 46

Rep: Reputation: 15
Wireshark, perhaps...
 
Old 05-28-2008, 11:14 AM   #3
abefroman
Senior Member
 
Registered: Feb 2004
Location: lost+found
Distribution: CentOS
Posts: 1,430

Original Poster
Rep: Reputation: 55
Quote:
Originally Posted by maverick_awp View Post
Wireshark, perhaps...
That runs on X windows though, no? I needs something that will work from the command line.
 
Old 05-29-2008, 04:18 PM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981
tcpdump is compatible with pcap, but tshark is the console version of wireshark if you want to use that. by default this is pcap format too. in fact running file on a sample of each both report them as tcpdump capture files, so you're fine with either.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How can I read a .pcap file? abefroman Linux - Software 3 05-29-2008 04:18 PM
Dsniff syntax for searching a pcap file? Jukas Linux - Software 5 08-28-2007 01:09 PM
looking for a MSN msgsnarf for pcap file metabaron Linux - Networking 0 07-13-2006 05:29 AM
looking to run ntop once daily reading from pcap file doublez Linux - Software 1 08-25-2005 06:16 PM
ntop once daily html summary from pcap file doublez Linux - Networking 0 08-25-2005 02:28 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 10:02 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration