Ethereal-users: RE: [Ethereal-users] Ethereal with Sniffer PRO

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Sheetz, Vince S" <vince.s.sheetz@xxxxxxxxx>
Date: Thu, 27 Feb 2003 15:52:19 -0800
Ethernet - sample attached



-----Original Message-----
From: Guy Harris [mailto:guy@xxxxxxxxxx] 
Sent: Thursday, February 27, 2003 3:42 PM
To: Sheetz, Vince S
Cc: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] Ethereal with Sniffer PRO


On Thu, Feb 27, 2003 at 02:51:45PM -0800, Sheetz, Vince S wrote:
> I had tried to save the traces out using the save as option to Sniffer

> 2
> - then when opening the file with Sniffer I received a message of
> unknown file format.

Given that we've reverse-engineered the Sniffer file format, we don't
know what all the fields in the file and packet headers mean; any field
we don't know about gets written out as zero.

That might make some files unacceptable to a Sniffer.

What link-layer type (Ethernet, etc.) do the captures have?

Attachment: IWG2
Description: IWG2