[Winpcap-users] Problem with tutorial SAVEDUMP.EXE

[Sunil Vajir]

Benjamin,
For both visualizing the packet and saving it to a file, you should get every packet, first print on the screen and then save it to a file (pretty obvious).

The above can be done using the following functions

pcap_next_ex - Use this function to get the next available packet (the example "basic_dump_ex" shows how to use this function )
pcap_dump - for saving the packet to the disk

You can find information regarding winpcap API at winpcap's site

(http://www.winpcap.org/docs/docs31/html/group__wpcapfunc.html)






  ----- Original Message ----- 
  From: Benjamin Amaudric 
  To: sunil.vajir at cacetech.com 
  Sent: Thursday, March 30, 2006 5:49 AM
  Subject: Re: [Winpcap-users] Problem with tutorial SAVEDUMP.EXE






  Thanks you very much for your explications.

  I can now capture packets and save them in a "filename.cap" and after I can read theses packets with "readfile_ex.exe".

  But I try to do in the same time, the capture with the visualisation on the screen and the save in a "filename.cap". Is it possible?

  When I just do the capture and visualisation I start the capture with pcap_loop(adhandle, 0, packet_handler, NULL); and when I capture to a "filename.cap" I start the capture with pcap_loop(adhandle, 0, packet_handler, (unsigned char *)dumpfile);

  It's possible to make twice in the same time?

  Thanks you very much


----------------------------------------------------------------------------
    From: "Sunil Vajir" <sunil.vajir at cacetech.com>
    Reply-To: winpcap-users at winpcap.org
    To: <winpcap-users at winpcap.org>
    Subject: Re: [Winpcap-users] Problem with tutorial SAVEDUMP.EXE
    Date: Thu, 23 Mar 2006 08:32:07 -0800


    Benjamin,
    The executable savedump.exe expects the user to specify a "file name" where all the packets should be saved.
    The easiest way would be to use the command prompt, goto the debug directory (or the directory where savedump.exe is sitting) and type
    savedump.exe tempfile.cap

    Once you do that, it asks for the interface that you want to capture the packets from, select the interface and from that point all the packets coming from that interface will be saved to tempfile.cap

    The same thing is true for readfile_ex i.e. it also expects the user to specify the file name.

    regards ... 


      ----- Original Message ----- 
      From: Benjamin Amaudric 
      To: winpcap-users at winpcap.org 
      Sent: Thursday, March 23, 2006 4:25 AM
      Subject: [Winpcap-users] Problem with tutorial SAVEDUMP.EXE


      Hi,

      I don't understand the result when I execute the program of savedump.dsw. The build is ok and I have the folowing result:  .....Savedump.exe filename Press any key to continue 

      In which file my capture is save?

      I try to compile readfile_ex.dsw but I have the same result!!!

      Can you explain me How can I save Capture and How can I read the packet from a DumpFile

      Thanks


--------------------------------------------------------------------------
      Retrouvez tout en un clin d'oeil avec Windows Desktop Search ! 


--------------------------------------------------------------------------


      _______________________________________________
      Winpcap-users mailing list
      Winpcap-users at winpcap.org
      https://www.winpcap.org/mailman/listinfo/winpcap-users



    >_______________________________________________
    >Winpcap-users mailing list
    >Winpcap-users at winpcap.org
    >https://www.winpcap.org/mailman/listinfo/winpcap-users





------------------------------------------------------------------------------
  MSN Messenger : dialoguez gratuitement de PC à PC ! 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20060330/305bc6dc/attachment-0001.htm