Ethereal-users: Re: [Ethereal-users] LAPB>X25>IP decoding

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 7 Mar 2002 01:56:10 -0800
On Wed, Mar 06, 2002 at 03:44:54PM +0100, krzysztof wisniewski wrote:
> I just installed ethereal from binaries on Win95 and I am having the session
> captured in .txt file.(hex dumps of LAPB-X25-IP frames)
> I got confused about file formats for analysing of what I have with ethereal :-(
> I was trying to use text2pcap

text2pcap won't help - it can only write out files in libpcap format,
and there's no "LAPB" link-layer type for libpcap files.

> or manually prepare the file or read it with ethereal.

The only way to read those files in Ethereal would be to add code to
Ethereal's "Wiretap" capture-file-reading library to read them.

There's code in Wiretap to read other text-based formats, and that text
format looks fairly straightforward to parse, so it would probably be
possible to write code to do that.