Ethereal-users: Re: [Ethereal-users] Format of Etheral pcap files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 29 Jul 2006 10:40:30 -0700
Andrew Chalk wrote:

My original question wasn't very clear. I want to send the packets in the
capture file over the network to test an app. that is supposed to capture
them. For example, I could send them with WinPcap. Given that scenario, does
the ethereal dump contain the original packet data is it encoded? Is there a
header, etc?
At least for Ethernet, yes - what the packet contains is the original packet data, byte for byte. 
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users