Wireshark · Ethereal-dev: Re: [Ethereal-dev] First version of text2pcap is now available

[Guy Harris <guy@xxxxxxxxxx>]

> I've just committed the first version of text2pcap to the repository.

You may want to update the top level Makefile.nmake file, to build it on
Windows as well.

> There is a man page (built from doc/text2pcap.pod).

It says:

     -e	l3pid
	 Include a dummy Ethernet header before	each packet.
	 Specify the L3PID for the Ethernet header in hex. Use
	 this option if	your dump is an	IP packet with IP header
	 and payload, but no Layer 2 encapsulation.

If your dump has only IP packets, and no link-layer headers, you could
just make it a DLT_RAW libpcap file, with the "-l" flag.

(Perhaps the "-l" flag should also take, as arguments, symbolic names,
for the benefit of those of us who don't happen to have memorized the
numerical value of DLT_RAW.  :-))

It then says:

         Example: -e 0x806 to specify an ARP packet.

If your dump has one or more ARP packets in it, it's presumably not an
IP packet, so the description of the reason to use "-e" should perhaps
not speak of using it mainly for IP captures.