I have a pcap file (attached) that has packet in the format of "Linux
cooked capture". It seems pcap2har blindly applies ethernet type on
the packet. I have the fix in my forked github, songlibo/pcap2har. Let
me know if you can pull my fix.
Thanks,
-Libo
-Libo
On Fri, Nov 19, 2010 at 12:42 PM, Andrew Fleenor <andre...@gmail.com> wrote:
> Done. Thanks.
>