0

I am trying to read a dump file which is created with ettercap. But when I am trying to read it with ettercap it is saying: Error while capturing: bogus savefile header And I can't read the file with tcpdump or wireshark either. What is wrong with it?

|improve this question
  • How did you save the files? When you use Ettercap -L it will generate ecp files which are not in tcpdump (pcap) format. You must use ettercap -w to generate pcap,format. – eckes May 21 '19 at 1:24
  • It looks like the dump file is corrupted somehow. – Sohan Arafat May 24 '19 at 2:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.