Ethereal-users: Re: [Ethereal-users] Ethereal with Sniffer PRO

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 27 Feb 2003 15:41:55 -0800
On Thu, Feb 27, 2003 at 02:51:45PM -0800, Sheetz, Vince S wrote:
> I had tried to save the traces out using the save as option to Sniffer 2
> - then when opening the file with Sniffer I received a message of
> unknown file format.

Given that we've reverse-engineered the Sniffer file format, we don't
know what all the fields in the file and packet headers mean; any field
we don't know about gets written out as zero.

That might make some files unacceptable to a Sniffer.

What link-layer type (Ethernet, etc.) do the captures have?