Ethereal-users: Re: [ethereal-users] editcap conversion problems

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 7 Mar 2000 14:56:55 -0800 (PST)
> I'm having difficulty with editcap's encapsulation
> layer conversion.  I've experimented a little, but
> so far have not been able to convert between ethernet
> and fddi.

You may be misinterpreting what the encapsulation-layer conversion does;
the man page should perhaps explain that "set[ting] the packet
encapsulation type of the output capture file" means "setting the
encapsulation type in the header", not "translating the packets to have
the specified encapsulation type.

I.e., it doesn't *translate* encapsulation layers; it merely *replaces*
the encapsulation type - I think Richard put it in so that he could
translate a capture file of some unknown type into various types in the
hopes of figuring out what type of file it was.

I.e., editcap is incapable of turning an Ethernet capture into an FDDI
capture, as it neither knows nor cares what Ethernet or FDDI MAC-layer
headers look like.  Code would have to be added to do that type of
translation.