0

I am trying to read a dump file which is created with ettercap. But when I am trying to read it with ettercap it is saying: Error while capturing: bogus savefile header And I can't read the file with tcpdump or wireshark either. What is wrong with it?

Sohan Arafat
  • 103
  • 4
  • How did you save the files? When you use Ettercap -L it will generate `ecp` files which are not in tcpdump (pcap) format. You must use `ettercap -w` to generate pcap,format. – eckes May 21 '19 at 01:24
  • It looks like the dump file is corrupted somehow. – Sohan Arafat May 24 '19 at 02:48

0 Answers0