James Carlson <carlsonj@xxxxxxxxxxxxxxx> wrote: >> I tried to use pppdump with -p and -d. The input file I used was the >> pcap file (packets.pcap) generated by tcpdump. > As I said, pppdump and pcap formats are not at all the same. You'll > have to convert to go this route. > Attached is a quick-and-dirty program I wrote to convert from the Linux > libpcap variant and PPTP encapsulation you seem to be using and simple > pppdump format. I didn't bother with timestamps or other bits. Maybe > it'll work for you. Do you think it would be worth having a tcpdump DLT type for pppdump stuff, and just wrap it all up into a pcap container? -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | network architect [ ] mcr@xxxxxxxxxxxx http://www.sandelman.ca/ | ruby on rails [ -- To unsubscribe from this list: send the line "unsubscribe linux-ppp" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html