Ethereal-dev: Re: [Ethereal-dev] mergecap patch: dissimilar frame encapsulation types

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Fri, 13 Jul 2001 10:44:46 -0700 (PDT)
> Merging capture files with dissimilar frame encapsulation types (e.g.,
> one file came from an ethernet interface and the other from loopback)
> appears to be unuseful (i.e., Ethereal can't process all packets in the
> file and the frame encapsulation type is an attribute of the file and
> not the frame).  (Correct me if I'm wrong or if this is only true of
> pcap files).

This is true only of libpcap files.

At some point, there will, I hope, be a new libpcap format, fixing a
number of deficiencies of the current format; it should be able to
handle capture files with multiple interfaces of the same or different
types.