["Chris Eagle" <cseagle@xxxxxxxxxxxx>]

I recommend a quick review of pcap.h along with the pcap(3) man page.
Particularly the following functions:

pcap_dumper_t *pcap_dump_open(pcap_t *p, const char *fname);

And

void pcap_dump(u_char *user, struct pcap_pkthdr *h, u_char *sp);

Along with: struct pcap_pkthdr

Which should be about all you need.

Regards,

Chris

> -----Original Message-----
> From: ethereal-dev-bounces@xxxxxxxxxxxx 
> [mailto:ethereal-dev-bounces@xxxxxxxxxxxx] On Behalf Of Phil Roux
> Sent: Thursday, January 13, 2005 5:34 AM
> To: ethereal-dev@xxxxxxxxxxxx
> Subject: [Ethereal-dev] format
> 
> I have raw packets captured remotely and would like to 
> programatically write 
> them to a file which can then be read in by Ethereal.  Can 
> anyone help me 
> out with the formatting?
> 
> Thanks
> 
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>