tcpdump mailing list archives

Cannot read .pcap file's contents with tcpdump


From: Bibudh Lahiri <bibudh () gmail com>
Date: Thu, 15 Jan 2009 14:30:21 -0600

Hi,
  I've downloaded a file of packet traces
(eq-chic.dirB.20080319-185908.UTC.anon.pcap) from www.caida.org. I'm trying
to read its contents using the following command:

  tcpdump -r eq-chic.dirB.20080319-185908.UTC.anon.pcap

but the output shows only the timestamps of the records, i.e., the output is
a series of lines that look like the following:

12:59:08.079675 IP [|ip]
12:59:08.079677 IP [|ip]
12:59:08.079678 IP [|ip]
12:59:08.079679 IP [|ip]
12:59:08.079682 IP [|ip]
12:59:08.079683 IP [|ip]
12:59:08.079694 IP [|ip]
12:59:08.079694 IP [|ip]

   Is it a problem with the file itself, or should I use a different option
with the tcpdump command to read .pcap files?
   Thanks in advance
                             Bibudh


-- 
Bibudh Lahiri
Graduate Research Assistant
Department of Electrical and Computer Engineering
Iowa State University
http://home.eng.iastate.edu/~bibudh/
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: