This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Importing into Wireshark from Mac

0

I'm trying to import a file to modify it in Wireshark version 2.0.1 and it won't import. The file I'm trying to import is in the TextEdit app, what type of files can I import into Wireshark?

Thanks

asked 21 Apr '16, 16:29

canigetanole's gravatar image

canigetanole
6112
accept rate: 0%

What is the actual file you're trying to import? And what format is it? Is it a text file in the format described by text2pcap or something else? Maybe you could provide the file contents or at least a portion of it?

(20 Jul '16, 08:32) cmaynard ♦♦

One Answer:

0

I'm trying to import a file to modify it in Wireshark version 2.0.1

Then you're presumably using the GTK+ version - the Qt version doesn't currently support the packet editor.

The file I'm trying to import is in the TextEdit app, what type of files can I import into Wireshark?

A number of file types, including Executable and Linkable Format (ELF) binary files, but not Mach-O binary files, so you might be able to modify Linux and *BSD and Solaris binaries, but not OS X binaries.

answered 21 Apr '16, 17:06

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%