Tag: TRANSACQ

The most recent versions of Wireshark default to using an enhanced file format called pcap-ng when saving packet capture data. The Winpcap library used by Transacq is maintained separately from the Wireshark project, so it does not yet handle the pcap-ng format. Thus, Transacq data must be saved in the older pcap format.

To save new data in pcap format, you must manually select pcap when saving the file in Wireshark.

To convert existing pcap-ng data to pcap format, use the following command syntax in the editcap utility available with Wireshark:

editcap -F libpcap infile outfile

<br>

TRANSACQ-Saving-data-in-pcap-format.pdf