I am capturing traffic on a linux box and want to open the capture on a windows box in wireshark but it gives me an error:
The file "conference.pcap" isn't a capture file in a format Wireshark understands.
and has an OK button.
I have Wirehsark version 1.8.4
I am running the command on my linux box
tcpdump dst 10.10.1.2 -w /root/conference.log
I press ctrl and c to stop the capture
The screen writes:
10 packets captured
11 packets received by filter
0 packets dropped by kernel
I transfer the file from Linux to windows and double click ot open and that is when I get the error.
I have tried nameing the file .log or .pcap and both get the same error.
What am I doing wrong?