This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

PCAP file can’t be opened

0

Hi, Im trying to open a .pcap file but with no luck. I was told I need an older version of Wireshark to open it (no idea why) But I tried 1.6.6, 1.7.1, 1.8.6 and the newest, but without any luck

It is a sample od DSS1 communication. Can anyone help?

File can be found here: https://www.dropbox.com/s/piub0v87leqocst/SS_zadani_protokol_C.pcap

asked 12 Oct '14, 14:50

Salamander's gravatar image

Salamander
1111
accept rate: 0%


One Answer:

0

That's because that file is not a PCAP file, it's plain ASCII you can open in any text editor.

answered 12 Oct '14, 14:56

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Jesus, I feel really stupid :D Any way to import it to WS?

(12 Oct '14, 14:57) Salamander

No, I don't think Wireshark can read files like that.

You may be lucky and be able to convert the file from ASCII to PCAP binary format by using text2pcap (a command line tool installed together with Wireshark), but I'm not sure it's worth the hassle - your file doesn't look like it's formatted in a way you can convert it, but I may be wrong.

(12 Oct '14, 15:02) Jasper ♦♦

but the weird thing is that the file really worked on Wireshark on another machine ... it was version 1.6.6, and it was imported with no problem

(12 Oct '14, 15:05) Salamander