Wireshark -w command line option defaults to pcap format. Need to save a Wireshark capture to a specific file with a specific format. Possible example: -w "filename" -F "format" where "format" defines the save as type. Is this possible? Thanks asked 11 Nov '13, 15:03  JerryCape |
One Answer:
If you're doing a live capture, either with Wireshark or with TShark, it can only be saved in pcap or pcap-ng format. If you're using TShark or editcap to read a saved file in one format and write to a file in another format, you can use answered 11 Nov '13, 21:11  Guy Harris ♦♦ |
