So,
The .enc I gather would be the dos based "ngsniffer" for the .enc but I
have no idea what the .bpf would be nor do I know what kind of sniffer
that would be from.
> -----Original Message-----
> From: Guy Harris [mailto:guy@xxxxxxxxxxxx]
> Sent: Monday, June 23, 2003 7:02 PM
> To: Christopher Lyon
> Cc: ethereal-users@xxxxxxxxxxxx
> Subject: Re: [Ethereal-users] Output from tethereal to a .bpf or .enc
>
>
> On Monday, June 23, 2003, at 5:32PM, Christopher Lyon wrote:
>
> > Is there a way to take the output from tethereal to a .bpf or .enc
> > file?
>
> I've no idea what a ".bpf file" is, so I can't answer that part of the
> question.
>
> The only ".enc files" I know of, offhand, are Ethernet capture files
> from the DOS-based Sniffer software (and are probably best referred to
> as "DOS-based Sniffer captures" rather than ".enc files", for the
> benefit of people who don't have a list of Windows file suffixes
> memorized).
>
> If by "the output of Tethereal" you mean a Tethereal binary capture
> file, Tethereal can itself write out Sniffer capture files rather than
> its native libpcap format, for at least some network types, including
> Ethernet. See the "-F" flag. You can also use "editcap" to read a
> libpcap file and write out a Sniffer file, or can read it in Ethereal
> and save it in Sniffer format.
>