hi, i use tshark to convert a pcap file to txt file. i use this command: tshark -r input.pcap -x > output.txt How can i convert this text file (output.txt) to a pcap file? packets start by IP. asked 14 Jul '17, 23:47  hhw edited 14 Jul '17, 23:49 |
One Answer:
You can if you have the original packet bytes in the text output as well. There's the command line tool text2pcap, or you can use the 'Import from hex dump' feature from Wireshark. Make sure that the text file matches the required input, so some preprocessing of the text file may be required. answered 15 Jul '17, 00:57  Jaap ♦ |
