Hi there I have over 300 cap files that some that had been generated. I'm looking to use network miner to analyse these files, the only trouble is network miner can only read pcap captures. I know you can re save a cap to pcap, but i dont want to do this 300 times. Is there a way to convert cap to pcap in a batch? or merge all 300 together in a batch then re save the unified batch to pcap?? asked 10 Jan '16, 12:49 Kenny Kev edited 11 Jan '16, 03:08 grahamb ♦ |
One Answer:
You can use editcap in a script.
If you loop over the files in a script, you can automatically convert all files. Regards answered 10 Jan '16, 13:01 Kurt Knochner ♦ edited 10 Jan '16, 13:08 see the link in my answer. (loop over files...). Like:
(10 Jan '16, 13:05) Kurt Knochner ♦ The examples are in my answer and my comment. What exactly does not work? Any error messages? BTW: editcap is probably not in your PATH variable on Windows, so you'll have to start it with
or
(10 Jan '16, 14:26) Kurt Knochner ♦ |
What is the intend of removing the question?
I've reverted that change.
maybe, homework and the fear to get caught ?!?