Ethereal-dev: [Ethereal-dev] RFC: Perl NetXRay cap module

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Sanderson, George W" <george.w.sanderson@xxxxxxxxxx>
Date: Fri, 2 Jan 2004 09:31:55 -0600
I currently have a Perl module that analyzes Sniffer summary ASCII print files.
Network Associates has been changing their print file formats and the time required to generate these text files is prohibitive.

What I would like to be able to do is directly read and parse the ".cap" files from within my Perl code.
I have not been able to find a Perl module that directly reads a NetXRay cap file.

Does anyone know of such a module?  Does anyone think that such a module would be useful?

I was thinking that the C routines in wiretap/netxray.c could be hooked into a Perl module in order to read a cap file and that the NetPacket Perl module could be used to parse the raw packet data.

Any comments?