Hi, |
AFIAK, you cannot convert a Netscaler format to pcap/pcapng directly with Wireshark/tshark/editcap, at least it did not work in my tests. tshark -nr nstrace1_test.cap -w output.pcap tshark: The capture file being read can't be written as a "pcapng" file. editcap nstrace1_test.cap output.pcap editcap: Can't open or create output.pcap: Files from that network type can't be saved in that format However, there seems to be a Citrix tool to convert those files.
Please ask in the Citrix forum for details Regards The citrix doc lists commands to covert nstrace files (.cap) to pcap files. I've just used it with a current Netscaler 11.1.
(27 Apr '17, 05:02)
Uli
|