Ethereal-dev: Re: [Ethereal-dev] Bug: ethereal won't decode first fragment

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 7 Mar 2002 13:14:20 -0800
On Thu, Mar 07, 2002 at 03:59:30PM -0500, Marc Milgram wrote:
> In my private version I now accept packets that are not tagged
> TCPtrace.  I also contacted the maintainer of TCPtrace as to this
> issue.  I am hesitant to release the modified code because it may parse
> lines of text after the end of the dump, and perhaps behave strangely. 
> I will wait to hear what the TCPtrace maintainer says after he returns
> from his leave.

Is there any way, in VMS, to get at raw packet data on a network
interface?

If so, it might be interesting to try to port libpcap, so you're not
forced to rely on tools such as TCPtrace, which attempt to interpret the
raw data and don't always do it in a way useful for Ethereal.