["Guy Harris" <gharris@xxxxxxxxx>]

Ray Wang said:
> Ethereal works perfectly to open such a big file, and all packets
> (979,371) seem to have been decoded properly.  My point is Ethereal
> has dealt with the AiroPeek format, and per-packet headers, etc.
> correctly, why can't Ethereal save individual packets instead of
> whole?

Because all it's dealt with is the ability to *read* that file format. 
The code to *write* a file format is different; about all it'd share with
the code to read a file format would be structure definitions and perhaps
some tables and constants. It's also potentially more complicated - when
reading a file format, you can often ignore stuff that's not relevant to
the program reading the file format, but, when writing that file format,
you might have to generate correct versions of that stuff.

Nobody's written any code to write the {Ether,Airo}Peek V9 format.