THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

How to convert Pcapng file to pcap file by Tshark

How to convert Pcapng file to pcap file by Tshark.

asked 2018-01-31 16:11:48 +0000
This post is a wiki. Anyone with karma >750 is welcome to improve it.
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

You would do

tshark -F pcap -r {pcapng file} -w {pcap file}

Note that not all pcapng files can be converted to pcap files; if the file has interfaces with more than one link-layer header type, and there are packets from interfaces with different link-layer header types, pcap can't support that. TShark will, unfortunately, currently not report that as an error; the packets that have a link-layer header type other than the type of the first packet will not dissect correctly.

Guy Harris's avatar
19.9k
Guy Harris
answered 2018-01-31 20:43:32 +0000
edit flag offensive 0 remove flag delete link

Comments

Thanks.It worked.

wkwj's avatar wkwj (2018-02-02 07:18:12 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer