This is our old Q&A Site. Please post any new questions and answers at

I have a binary file that I want to convert to a pcap file. I did a hexdump and then converted to a pcap using text2pcap. But there are multiple packets(custom protocol, custom dissector) in that binary file. How do I use hexdump to delineate different packets so that my pcap file has multiple packets??


asked 13 Jun '11, 12:37

tut087's gravatar image

accept rate: 0%

The different packets are tracked through their offset:

An offset of zero is indicative of starting a new packet, so a single text file with a series of hexdumps can be converted into a packet capture with multiple packets.

See the section in the User's Guide.

permanent link

answered 13 Jun '11, 13:50

Jaap's gravatar image

Jaap ♦
accept rate: 14%

Thanks. When I create ahexdump. offset of zero comes in the beginning only. So do I have to manually change it? Or is there a method to produce a zero offset after regular byte interval?

(13 Jun '11, 14:14) tut087
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 13 Jun '11, 12:37

question was seen: 2,828 times

last updated: 13 Jun '11, 14:14

p​o​w​e​r​e​d by O​S​Q​A