Ethereal-dev: RE: [Ethereal-dev] Fluke capture file -> conversion to libpcap

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Nisbet, Tom" <Tnisbet@xxxxxxxxxxxxxxxxxx>
Date: Mon, 6 Feb 2006 22:54:47 -0500
We would need a binary capture file too.  The hex bytes in the text file 
just show the packet data, but they don't include the file and packet 
headers. 

>From the error message, the fix may turn out to be as simple as adding 
an enum for the correct media to the Shomiti list of WTAP_ENCAPs in 
the snoop.c file.

Tom

> Looks like I spoke too soon. The file contains a hexdump of the packet
> as well, so it should be possible to do the reverse 
> engineering without
> a binary capture file. But as we need a binary capture file anyway for
> testing, it would still be very helpful.
> 
>  ciao
>      Joerg