If pcap can be converted to txt by using: "tshark -V -r original.pcap > file_to_convert.txt" and pcap can be converted to txt: "text2pcap.exe -e 0x800 file_to_convert.txt result.pcap", why does the resulted file have a different dimension from the original one?
Is there something that I could change in order to make it right ?
Thank you !
asked 20 Nov '12, 06:19
edited 20 Nov '12, 06:30
Because the output of tshark -V is not the input format of text2pcap. See the manual of text2pcap for the format requirements. These programs are not each others opposite.
answered 20 Nov '12, 06:33