Hi Guy
This file was captured by a Commercial software NetVCR (www.niksun.com) It
runs on modified FreeBSD kernel.. They use their own engine to capture this
file. As i know this engine makes use of pcap library only.
To my surprise the software gives good info about the captured packet and
you can save them in pcap format.
I have been using Ethereal for a long time. So I was testing these pcap
after opening them in Ethereal just two see whether results are same.
While packets for ethernet and many other protocols were same in both NetVCR
and ethereal there are following protocols which could not be disceted in
ethereal but very well discected on NetVCR
these are
ATM over T1
PPP over T1
Cisco Serial over T1
Frame Relay over T1
Serial Well Fleet over T1
Naveen
Would any body like to write discectors for these protocol
----- Original Message -----
From: "Guy Harris" <guy@xxxxxxxxxxxx>
To: "Naveen Kumar Kaushik" <naveenk@xxxxxxxxxxxxx>
Cc: <Ethereal-users@xxxxxxxxxxxx>
Sent: Thursday, June 26, 2003 11:55 AM
Subject: Re: [Ethereal-users] Capturing ATM over T1
> On Thu, Jun 26, 2003 at 10:08:09AM +0530, Naveen Kumar Kaushik wrote:
> > I am trying to see s file containing ATM over T1 traffic in ethereal .
> > I am just able to see time stamp & no other info.
> > Can any body explain this.
>
> I can't do so unless you indicate whether you captured the file using
> Ethereal (and on what OS you did so) or captured it with some other
> sniffer program (and indicate what sniffer program that was), and I'll
> probably also need to see the capture file as well.
>