Problem opening pcap with pcaputil

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

I'm trying to use pcaputil to convert pcap files (containing G.711u) to WAV. The pcap files are collected using "voipmonitor" through a mirrored port on a Cisco switch.

The pcap files are easily opened, listened, and processible from Wireshark and even the tshark utility. Each call is separated into its own PCAP file.

However, when trying to convert a file I get an error:
# pcaputil file.pcap test.wav
14:38:26.976? ???endpoint.c? Warning: no worker thread is created inmedia endpoint for internal ioqueue
14:38:26.976? ? ? ? ? rtp.c? pjmedia_rtp_session_init: ses=0x604d48, default_pt=0, ssrc=0x0
Error: Error reading PCAP file: Size is too short (PJ_ETOOSMALL)

So then I thought maybe something was weird with the pcaps, if I try to just open and output it with tshark:
# tshark -r file.pcap -w tsharked.pcap

And then try to process, I get another error:
# pcaputil tsharked.pcap test.wav
14:40:22.244? ???endpoint.c? Warning: no worker thread is created inmedia endpoint for internal ioqueue
Error: pj_pcap_open(app.pool, input.ptr, &app.pcap): Invalid operation (PJ_EINVALIDOP)

So one thing that I realized is that my pcap files do contain a VLAN tag from the switch... Maybe pcap-util does like that, so I tried removing it with tcprewrite:
# tcprewrite --enet-vlan=del --infile=file.pcap --outfile=plain.pcap
# pcaputil plain.pcap test.wav14:43:23.650? ? ? ? ? rtp.c? pjmedia_rtp_session_init: ses=0x604d48, default_pt=0, ssrc=0x0
Error: Error reading PCAP file: Size is too short (PJ_ETOOSMALL)
14:43:23.650? ? ???pa_dev.c? PortAudio sound library shutting down.

So basically, every time I get a different error when trying to load in my pcap files.

Does anyone have clues or hints by what this could be caused? How can we resolve this? Do the files need to be prepared in some way prior to putting them into pcap-util?

Thanks in advance! :-)
 
14:43:23.650? ? ? ? ? rtp.c? pjmedia_rtp_session_init: ses=0x604d48, default_pt=0, ssrc=0x0
Error: Error reading PCAP file: Size is too short (PJ_ETOOSMALL)
14:43:23.650? ? ???pa_dev.c? PortAudio sound library shutting down.

So basically, every time I get a different error when trying to load in my pcap files.

Does anyone have clues or hints by what this could be caused? How can we resolve this? Do the files need to be prepared in some way prior to putting them into pcap-util?

Thanks in advance! :-)




[Index of Archives]     [Asterisk Users]     [Asterisk App Development]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [Linux API]
  Powered by Linux