Hello, here's my US$.02 worth.
We use both Distributed Sniffer (DS) and Ethereal at Sandia Labs.
Whenever I want to use some of DS's "expert" modes I save the
Ethereal capture using the Network Associates Sniffer (Dos-Based)
.enc file format that NAI recommended. I've never seen any
problems with reading Ethereal captures into DS. Anyway you can
make a sanitized pcap capture available for download so I could
load it with DS?
diana eichert
-----Original Message-----
From: Richard Sharpe [mailto:rsharpe@xxxxxxxxxxxxxxxxx]
Sent: Tuesday, October 07, 2003 6:02 PM
To: Herman, Matthew
Cc: ethereal-dev@xxxxxxxxxxxx
Subject: [Ethereal-dev] RE: Question on Ethereal
On Tue, 7 Oct 2003, Herman, Matthew wrote:
> We are using Sniffer Distributed Release 4.2. I am also using Ethereal
> version 0.9.15 (c) and also reading the users manual guide htm.
> What I did was to create my own directory named c:\Matt's captures
> It has a drop down box that gives you a bunch of file formats that you can
> save captures to. The choices that apply to me are
> File type:
> Network Associates Sniffer (Dos-Based)
> Network Associates Sniffer (Windows based) 1.1
> Network Associated Sniffer (Windows-based) 2.00x
> I called network Associates and the tech said to try the first format that
> they developed that is .enc he said it is open and most people use it now.