Question : WinDump file output is garbled...

When I run windump and output to the dos window everything
works fine, but when I output to a file, most of the
information is garbled. For instance, the URLs contain
an empty square character where there should be a period.
Looks like this: www(square)somedomain(square)com. This
empty square character appears quite frequently in the file output...I tried using different file formats..but no luck. I guess I can read the urls, but pretty much all
the other info is destroyed in the output.
Does anyone know how to fix this??



Neil D

Answer : WinDump file output is garbled...

cMan

How are you instructing windump to put the output to a file?

If you are using the "windump -w mycapture" command to output the data to mycapture then you will not be able to load the file to an editor and read it. This data is actually a binary capture file which is meant to be re-processed by windump using the -r mycapture option at a later time - in other words it allows you to capture raw data now then reprocess it using various filters later on.

I suspect that what you want to do is to capture what would normally come out on the screen into a file. If this is the case then you need to use redirection as follows:

windump > this_should_be_readable.txt

and this file will be readable in any editor.

Cheers - Gavin