View Single Post

   
  #3 (permalink)  
Old 01-16-2008, 07:55 AM
Doug McIntyre
 
Posts: n/a
Default Re: exporting snoop output to a .cap

"Veni" <inveni@hotmail.com> writes:
> I'd like to know if we can use snoop and export the capture in a format
>(like *cap) which can be read by a packet analyser like Etheral or perhaps
>EtherDetect. I may not have permission to install etheral on one of my
>servers but would like to capture the packets and
>export it for analysis of snmp packets. thanks for any advice.


Ethereal can read snoop files directly. But if you have something else
that needs pcap file format, ethereal also comes with a util called
mergecap that can read tons of different input file types and output
stock pcap files.


Reply With Quote