Jump to content
Welcome to our new Citrix community!

Convert nstrace.cap file to .pcap

Krister Dahlstrand

Recommended Posts

You set the trace format when you capture the trace.   I don't think you can convert it after the fact.


Wireshark may be able to view the cap (nstrace format) but may not be able to interpret all header info.  

otherwise, you will need to redo the trace and specify pcap (nstcpdump) format while capturing the trace in either the GUI, start nstrace, or nstcpdump.sh commands.



Link to comment
Share on other sites

OK, I don't know if this command works or not, but there is a reference in this thread:  https://osqa-ask.wireshark.org/questions/30000/netscaler-to-pcap

To this command:  


nsapimgr -s tcpdump=1 -K nstrace1.cap -k output.pcap


Where -K (big) <input file name, include path if not in the correct directory>

-k (little) is output file name




Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...