pcapng2pcap

pcapng2pcap

convert pcapng capture file to pcap

Features

• Convert simple pcapng to pcap
• Convert simple gzipped pcapng to pcap
• Convert complex* pcapng to pcap
• Convert complex* gzipped pcapng to pcap

*contains multiple section header blocks

Building

git clone https://github.com/s77rt/pcapng2pcap.git
cd pcapng2pcap
make
make install

Usage

pcapng2pcap 0.1.0
convert pcapng capture file to pcap.

Usage:   pcapng2pcap <INPUT_FILENAME> <OUTPUT_PREFIX>

Example: pcapng2pcap mycapture.pcapng mycapture
         Will produce mycapture.1.pcap,
                      mycapture.2.pcap,
                             ...      
                      mycapture.n.pcap
         Where n is the number of section header blocks in mycapture.pcapng

Limits:  PCAPNG BigEndian (Endianness) files are not supported
         PCAPNG timestamps's resolutions that are different than 10^-6 are not supported

MIT License
Copyright (c) 2020 Abdelhafidh Belalia (s77rt) <admin@abdelhafidh.com>

Changelog

Refer to CHANGELOG.md

Troubleshooting

no install location for directory

export GOPATH=$(go env GOPATH)
export GOBIN=$(go env GOPATH)/bin

pcapng2pcap: command not found

Add $GOPATH/bin to $PATH export PATH=$PATH:$(go env GOPATH)/bin

Report a bug / Submit a new issue