Yes. From the text2pcap man page:
Text2pcap is a program that reads in an ASCII hex dump and writes the data described into a capture file. text2pcap can read hex dumps with multiple packets in them, and build a capture file of multiple packets.
Wireshark itself supports the same thing from "File -> Import from Hex Dump...".
i tried this file and it only recognizes the 1st packet.
000000 01 1B 19 00 00 00 0F F1 0A D0 00 00 88 F7 01 02 000010 00 2C 00 00 00 00 1F AA A8 82 DE 85 6E E2 00 00 000020 00 00 00 04 00 00 0F F1 0A D0 00 00 A6 A5 F4 E7 000030 26 AC 19 8D 53 23 22 47 59 F6 00 00 93 F5 52 9D 000000 01 1B 19 00 00 00 00 82 EA 7F 00 02 88 F7 09 02 000010 00 36 00 00 00 00 1F AA A8 82 DE 85 6E E2 00 00 000020 00 00 00 04 00 80 EA 00 00 00 00 00 A6 A5 03 4D 000030 00 00 E7 2D 77 BB 3B 9A C6 D4 00 04 00 00 0F F1 000040 0A D0 ...
1) For me the imports perfectly well as two PTP packets? Nothing more than text2pcap import.txt import.pcap, then open the `import.pcap file as normal.
2) The two things are basically the same, text2pcap is a commandline utility for this, the import from hex dump is a GUI front end for the same functionality,
Asked: 2025-10-30 10:31:30 +0000
Seen: 77 times
Last updated: Oct 30
