Ethereal-users: Re: [Ethereal-users] Adding new protocols without recompiling?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 18 Aug 2001 14:07:57 -0700
On Wed, Aug 15, 2001 at 12:50:32PM +0200, Carsten Fuchs wrote:
> Ok, no problem. I simply didn't realize earlier that the file format
> of libpcap is that simple.

Not only is it simple, but there's even a library to read that format,
called, err, umm, "libpcap". :-)

I.e....

> I've written a simple decoder for that file format

...there should rarely be a need to write a decoder for it - just write
an application that uses "pcap_open_offline()" and "pcap_loop()".