[Guy Harris <gharris@xxxxxxxxx>]

Andreas Fink wrote:
> look at the source of text2pcap or check out the libpcap documentation 
> (www.tcpdump.org)

...and then note that the libpcap documentation mentions routines to 
create and write libpcap-format files (that's the format that Ethereal 
uses).  pcap_dump_open() requires a pcap_t, but with newer versions of 
libpcap you can use pcap_open_dead() to create a fake one.