Wireshark-dev: Re: [Wireshark-dev] develop a tool to parse captured file

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Mon, 2 Jul 2007 20:12:04 -0700
On Mon, Jul 02, 2007 at 07:41:36PM -0700, Yefim Rozenkrants wrote:

> I need to extract from capture file ( saved with ethereal) packet
> streams to different computers in the local network. Therefore I need
> to parse the capture file. I would like to get an advice how to start
> this project. What is the capture file structure and where I can find
> it. The development will be in windows environment (visual studio
> 2005). 

Wireshark's main file format is normal libpcap:

  http://wiki.wireshark.org/Development_2fLibpcapFileFormat


Steve