Ethereal-users: Re: [Ethereal-users] Capture file format conversion problem.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 5 Sep 2001 12:05:41 -0700 (PDT)
> I want to read with my app some capture files that are formatted in a 
> generic network sniffer (DOS) format, so I used the editcap utility from 
> ethereal to convert the format to libpcap, although tcpdump and windump are 
> able to read the converted file my application can't.

Is your application using "pcap_open_offline()", and either
"pcap_dispatch()" or "pcap_loop()", to read the capture file?  That's
what tcpdump and windump do.

If not, change it to do so.

If it fails when using "pcap_open_offline()", what sort of failure are
you getting?