Jordan Holland
Jordan Holland
I have opened #4 for fixing command line argument parsing: it requires a bit more verbose usage,, but removes any trouble regarding file naming. Will address today. the nPrint file...
I've closed #4, the new command should be: `$ nprint -N traffic.npt -w rebuilt-traffic.pcap` Let me know if you have any issues.
Interesting. Does the nPrint have traffic in it? If so, Would you mind posting say, the first 5-10 lines here so that I can run locally?
I put the above nPrint in a file `nprint-bug.npt`, and ran `$ nprint -N nprint-bug.npt -w nprint-bug-rebuilt.pcap` tcpdump on the resulting PCAP shows: `$ tcpdump -r nprint-bug-pcap.pcap -nn` ``` -4:00:00.000000...
Awesome, glad it worked. We probably need to implement better error / reporting to users in general, thanks for the suggestion.
Thanks for the detailed error report regarding recreating pcaps from nPrints. As you can imagine, this functionality is a bit tricky to actually implement, so I'm not shocked that we're...
Interestingly, I'm not having this issue on Mac OS ``` $tcpdump --version tcpdump version tcpdump version 4.9.3 -- Apple version 100 libpcap version 1.9.1 LibreSSL 2.8.3 $nprint --version nprint 1.2.0...
Interesting. Possible to bump the version of `libpcap` to see if that could be an issue? It's unclear to me what could be happening between our two versions.
Thanks for the confirmation. Thinking about it, I wonder if that has to do with Linux Cooked headers (#24) and recreating a PCAP from them.
is this regarding this issue or #30?