Ethereal Network Analyzer

Photo courtesy of Michael_P

This article is written by Balakrishnan M
 
Editcap utility is used to select or remove specific packets from dump file and translate them into a given format. Editcap does not perform packet captures like ethereal. Instead, it operates on the captured packets and writes some of the required packets into another file. We can pass various options to editcap to get our preferred packets.

In this article, let us review 11 practical examples on how-to use editcap to handle the packet dumps effectively.
(more…)

{ 3 comments }