How to use the pcap file

Installing and Using OpenWrt
1

Can you please elaborate on that?

2

Download it to your PC and open it with wireshark.

2 Likes
3

Please share the link. I don't remember seeing it anywhere.

4

What link?

If Wireshark, it isn't OpenWrt-related, and the link was provided above nonetheless:

5

To read a packet capture file use tcpdump -r <path to pcap file>. You can also use libpcap filters to display just filtered packets of interest. See https://linux.die.net/man/3/pcap and https://linux.die.net/man/8/tcpdump

3 Likes
6

Depends on your use case and needs.

I use sngrep to analyze VoIP traffic:

sngrep -I <path-to-pcap-file>
7

It may help if the poster explained:

  • How OpenWrt is related
  • How the OpenWrt produced the pcap file
  • The purpose/reason the OP generated the file
8

I believe the OP is referencing this thread/post - Help with Softflowd and exporting netflow data to PRTG - #35 by RuralRoots

  • How OpenWrt is related?

    • it is related to the OpenWrt/Packages repository and enhancements I made to the softflowd package for use in OpenWrt.

  • How the OpenWrt produced the pcap file

    • multiple Openwrt utilities are capable of producing such files. It would seem logical that the OP would seek clarification with no prior knowledge of a pcap file.

  • The purpose/reason the OP generated the file

    • based on the poster’s use case in the above referenced thread, I suggested a packet capture file might also be useful.
2 Likes
9

That is correct!

10

Excellent!

Thanks for verifying a related thread - your posts didn't mention it whatsoever.

If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.

Perhaps - I don't assume much in these forums. I surmised the OP had more knowledge given they were seeking information on netflow (i.e. rather advanced).

1 Like
11

:+1:

Yeh, I did too. Based on his/her query, the poster appeared to have an understanding to the forensic capabilities in Netflow data streams.