Ethereal-users: Re: [Ethereal-users] .dmp file format...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 13 Jul 2006 02:32:32 -0700
ravi patil wrote:

i want to develop a application for which i want to read the .dmp file.
can anybody tell me the .dmp file format. what its header contain & all other information...

What's a ".dmp" file?

If that's the file format that Ethereal/Wireshark reads and writes by default (for which there's no "official" standard suffix - it originated on UN*X, in the command-line tcpdump program, so there wasn't a standard suffix assigned to it), then the best way to describe the format is "the format supported by the libpcap/WinPcap library".

The best way to read it is not to write your own code to understand the format, the best way to read it is to use libpcap/WinPcap to read it; it means you write less code (you don't have to write code to understand the file format), and the code you do write will continue to work with pcap-ng files when that's supported by libpcap/WinPcap and Wireshark.

If you're using UN*X, try "man pcap" or see

	http://www.tcpdump.org/pcap3_man.html

If you're using Windows, see

	http://www.winpcap.org/docs/docs31/html/main.html

	
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users