Introduction to Ethereal (v.0.9.9), The Open Source Network-Protocol Analyzer

Ethereal

Conversion to and from other formats

• Ethereal easily reads and writes tcpdump (libpcap), nettl

and Network Monitor traces with no special action

required of user. It even unpacks gzipped files on the fly,

via libz. Simply do File Æ Open to read other formats

directly.

• editcap can also perform conversions:

editcap [options] –F format infile outfile

For example, to convert a nettl trace to Network Monitor

v.1 format:

$ editcap –v –F netmon1 nettl.out.TRC0 \

nettl-to-netmon.cap