![]() At best, you can try to get another trace, if whatever problem you're trying to diagnose can be made to happen again, and this time have them use tcpdump with the -w option, so that it writes out a pcap file. ![]() If you need that information in order to solve a problem, you're out of luck. As the output of tcpdump was its text-mode output, the only information available in the file is the information tcpdump printed even if it were possible to convert that file to a pcap file, the pcap file would not contain any more information than is available in the printout - the TCP payload of the two packets you showed, for example, is permanently lost and you will not ever be able to get it back.
0 Comments
Leave a Reply. |