| 2020-05-11 07:13:54 +0000 | marked best answer | compressing / reading lz4 I'm on Ubuntu 19.10. I have a pcap file x.pcap which i can evaluate using tshark -r x.pcap I want to work with compressed pcap files. I do lz4 x.pcap. Trying to evaluate with tshark -r x.pcap.lz4 fails with "tshark: The file "x.pcap.lz4" isn't a capture file in a format TShark understands." tshark -v shows version "TShark (Wireshark) 3.0.5 (Git v3.0.5 packaged as 3.0.5-1)" and lists "with zlib 1.2.11" |
| 2020-05-11 07:13:54 +0000 | received badge | ● Scholar (source) |
| 2020-05-11 07:13:43 +0000 | received badge | ● Rapid Responder |
| 2020-05-11 07:13:43 +0000 | answered a question | compressing / reading lz4 I felt pretty sure, support for lz4 amongst a few others was indicated on some webpage / commit since some early 3.0x ve |
| 2020-05-11 06:02:38 +0000 | asked a question | compressing / reading lz4 compressing / reading lz4 I'm on Ubuntu 19.10. I have a pcap file x.pcap which i can evaluate using tshark -r x.pcap I |
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.