Ethereal-users: Re: [Ethereal-users] Can't save 'Selected Packets' to 'EtherPeek/AiroPeek trace

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Wed, 23 Jun 2004 12:40:55 -0700 (PDT)
Ray Wang said:
> When I tried to save selected packets or a range of packets, I got the
> error msg:
>
> Ethereal does not support writing capture files in that format.
>
> But I was able to save "All packets" to the V9 file format, I verified
> the saved file using AiroPeek 2.0.2.

Was the file you read a file in that format?

If you save all packets in a capture, Ethereal just copies the raw bytes
of the capture file.

If you save selected packets, Ethereal has to know how to write a file
header, and per-packet headers, for each of the packets it's saving.

Therefore, there are files that Ethereal can save all of in that file's
format but that it can't save some of in that format.