I haven't tried to do this myself and currently don't have access to test. I would google "ntop wireshark" and see what you find. There was a recent thread on this - maybe 6 weeks ago? When you specify the filename maybe use the full path? Ah, you're on Winblows.... Not sure if it supports this. You have a demo version or full version?
________________________________ From: [email protected] To: [email protected] Sent: Fri Aug 07 23:30:32 2009 Subject: Re: [Ntop] Importing pcap files Hi, When I type in Ntop -f filename, Ntop returns the message "Unrecognized option". I placed a test file in the same directory at Ntop so there is no issue with paths. I also verified that I can import the sample file into Wireshark so I know its good. I looked at the man page and I believe "-f" is the correct option. Below is a sample output C:\Program Files\ntop-Win32>ntop -f test.pcap Unrecognized option: -f Am I use the "-f" option incorrectly? Regards Gordon On Fri, Aug 7, 2009 at 6:12 PM, Gary Gatten <[email protected]> wrote: Ntop -f filename.pcap. Check the man page for sure. Some have reported issues with this so although it should work it may not! ________________________________ From: [email protected] To: [email protected] Sent: Fri Aug 07 19:51:57 2009 Subject: [Ntop] Importing pcap files Everyone, Is is possible to import a Wireshark packet capture (pcap) file into ntop? If this is possible, how is is done? Thanks Gordon "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
