I captured pure L2TP traffic into a cap file (pure means no IPSec stuff to encrypt). I can clearly see the L2TP packets in Netmon.
But I cant get the payload via LogParser.
My query is
LogParser.exe -i:NETMON -binaryFormat HEX "SELECT payload into temp.txt from 'L2TP.cap' "
Whats wrong with this query?
Even something like
LogParser.exe -i:NETMON -binaryFormat HEX "SELECT * into temp.txt from 'L2TP.cap' "
produces no ouput!