On 4/28/05, Matt Morgan <minxmertzmomo@xxxxxxxxx> wrote: [snip] > > I guess I'll install ethereal manually on the debian server so I can > > get a newer version. > > I spoke too soon. I couldn't open these output files in an older > version of ethereal either. > > How am I supposed to be creating output files? I'm just using > > tethereal [options] > outputfilename > > Is that wrong? you saved the text output not the binary capture use [-w savefile] instead. tethereal [ -a capture autostop condition ] ... [ -b number of ring buffer files [:duration] ] [ -c count ] [ -d <layer type==<selector>,<decode-as protocol> ]> [ -D ] [ -f capture filter expression ] [ -F file format ] [ -h ] [ -i interface ] [ -l ] [ -L ] [ -n ] [ -N resolving flags ] [ -o preference setting ] ... [ -p ] [ -q ] [ -r infile ] [ -R display filter expression ] [ -s snaplen ] [ -S ] [ -t time stamp format ] [ -T pdml|ps|text ] [ -v ] [ -V ] [ -w savefile ] [ -x ] [ -y link type ] [ -z statistics-string ] [ filter expression ] -- Leonard Isham, CISSP Ostendo non ostento.