I'm running Windows XP, with Firefox 1.5.0.4
When I have ethereal 0.99 installed, and click on a pcap file on my
web-based (Sourcefire) IDS console, it opens right up in Ethereal.
With Wireshark 0.99.1pre1 installed, it does not.
By examining the HTTP headers I found that the MIME type that the IDS
console applies to the pcap file is application/pcap
Apparently Ethereal understands this and configures the mimetype during
installation, but Wireshark does not.
wireshare -v:
wireshark 0.99.1pre1
Copyright 1998-2006 Gerald Combs <gerald@xxxxxxxxxxxxx> and
contributors.
This is free software; see the source for copying conditions. There is
NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE.
Compiled with GTK+ 2.6.9, with GLib 2.6.6, with WinPcap (version
unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.2.2, with ADNS, with
Lua 5.1.
Running with WinPcap version 3.1 (packet.dll version 3, 1, 0, 27), based
on libp
cap version 0.9[.x] on Windows XP S, build 2600.
Confidentiality Notice: The information contained in this e-mail and any attachments (including, but not limited to, any attached e-mails) may be legally privileged and confidential. If you are not an intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail is strictly prohibited. If you have received this e-mail in error, please notify the sender and permanently delete the e-mail and any attachments immediately. You should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you.