Ask Your Question
0

can a single text file hold 2 or more frames to be recognized during hex dump import

asked 2025-10-30 10:31:30 +0000

can a single text file hold 2 or more frames to be recognized during hex dump import

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2025-10-30 19:51:22 +0000

cmaynard gravatar image

Yes. From the text2pcap man page:

Text2pcap is a program that reads in an ASCII hex dump and writes the data described into a capture file. text2pcap can read hex dumps with multiple packets in them, and build a capture file of multiple packets.

Wireshark itself supports the same thing from "File -> Import from Hex Dump...".

edit flag offensive delete link more

Comments

From the same manual page on how to do this: "Each packet must begin with offset zero, and an offset zero indicates the beginning of a new packet."

Jaap gravatar imageJaap ( 2025-10-31 08:28:27 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2025-10-30 10:31:30 +0000

Seen: 24 times

Last updated: yesterday