I'm running into the same problem, except my file contains actual packet content. I'm capturing data directly from a device and getting data, but the target file is empty after the conversion. Any ideas? I can supply more info if needed. asked 22 Aug '16, 15:20 azbird converted to question 22 Aug '16, 18:20 Guy Harris ♦♦ |
So by "actual packet content" do you mean "a bunch of hex numbers giving the raw bytes in the packet"? The text format that Wireshark's "import" function, and its text2pcap command, handle is described in the text2pcap man page; is it in a format like that?