Ask Your Question

How to convert Pcapng file to pcap file by Tshark

asked 2018-01-31 16:11:48 +0000

this post is marked as community wiki

This post is a wiki. Anyone with karma >750 is welcome to improve it.

How to convert Pcapng file to pcap file by Tshark.

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted

answered 2018-01-31 20:43:32 +0000

Guy Harris gravatar image

You would do

tshark -F pcap -r {pcapng file} -w {pcap file}

Note that not all pcapng files can be converted to pcap files; if the file has interfaces with more than one link-layer header type, and there are packets from interfaces with different link-layer header types, pcap can't support that. TShark will, unfortunately, currently not report that as an error; the packets that have a link-layer header type other than the type of the first packet will not dissect correctly.

edit flag offensive delete link more


Thanks.It worked.

wkwj gravatar imagewkwj ( 2018-02-02 07:18:12 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2018-01-31 16:11:48 +0000

Seen: 879 times

Last updated: Jan 31