Ethereal-dev: Re: [Ethereal-dev] RE: Question on Ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ian Schorr <spamcontrol2@xxxxxxxxxxx>
Date: Tue, 7 Oct 2003 21:01:20 -0400
Distributed Sniffer v4.2 (and 4.3, for that matter) support reading the NetXRay 2.x and 1.1 files, DOS Sniffer (commonly associated with .ENC extensions) files. With the exception of perhaps some slight differences in how some of the fields are saved/interpreted, Distributed Sniffer reads files no differently than any other "recent" version of Sniffer. It should be able to read files saved by Ethereal in any of the three Sniffer formats. To prove it, I just tried loading traces saved in each of the three formats into DS 4.2, which worked fine.

Matthew, how are you trying to load the files? Are they located on the machine running the Distributed Console, and trying to open them from there? Are you pushing the files to the DS with, say, FTP, and trying to load them off of the DS?

Ian

On Oct 7, 2003, at 8:02 PM, Richard Sharpe wrote:

OK, I am not sure, but I have copied Ethereal-Dev. We might get some
answers from there about what version we should save the capture in to
allow 4.2 to read it.

Alternatively, if you can send us a capture from your version of Sniffer,
we might be able to add that format.