On Tue, Jun 19, 2007 at 10:55:32AM -0700, David DuPre wrote: > Guy, > > I am running Wireshark (mergecap.exe) Version 0.99.5 (SVN Rev 20677)on > WinXP and I need to automate the conversion of > a *.cap file from TCPDump (AIX, and RHat) into Sniffer Pro 2.0 version of the > file. > > Doing this from the GUI seems to work, but when I try this from the command > line using "mergecap.exe" or "tshark.exe" > I get this error: > > (tshark: The capture file being read can't be written in that format.) > > The command line I am using is: > > tshark -r top8_en0_w1ite_20070618_1700_NoNFS.cap -F ngwsniffer_2_0 -w > outfile.cap
That command syntax works for me (WinXP, TShark 0.99.6-SVN-22043). But maybe the tracefile you have behaves differently? Is it big? Is it shareable? I could try it on my version of TShark to see if this error is version-related? Cheers, Sake _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
