Ethereal-dev: Re: [Ethereal-dev] Bug: ethereal won't decode first fragment

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 7 Mar 2002 14:15:08 -0800
On Thu, Mar 07, 2002 at 05:05:04PM -0500, Marc Milgram wrote:
> I don't know of an elegant way to get at raw packet data on a network
> interface in VMS.  The TCPtrace maintainer indicated that he would like
> to add a binary file format, but I don't know of any time table for
> doing that.

Suggest to him that he might want to use libpcap format - if he can get
the link-layer header, fine, but, if not, just use DLT_RAW.  (That means
he'd have to convert from local time to UTC, I suspect, but so it
goes....)

> Another engineer took a look at porting libpcap to VMS.  It looked
> challenging.  He indicates that the lan drivers may provide the
> appropriate interface to libpcap, but neither of us knows much about
> that interface.

Is that interface documented anywhere? (It might be a QIO-based
interface.)