Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 1795] Feature Request: Ability To Open CommView Capture Fi

Date: Fri, 23 Nov 2007 23:17:50 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1795





------- Comment #11 from stephentfisher@xxxxxxxxx  2007-11-23 23:17 GMT -------
Thanks for the examples in pcap and CommView format and the link to the web
site showing the packet header format - it helped me write the code much
quicker!  I now have code on my machine to read in .NCF/CommView files and
parse them properly.  I just have some polishing up to do before adding read
support it to Wireshark.

If you could provide with a few of things it would be very helpful:
(1) a sample capture file that includes compressed packets.  The entire file
can be gzip compressed and be read in like most other capture files, but
CommView supports Zlib compression of individual packets and I need to test my
code that interprets those packets
 (2) Could you also send me a pcap version of the mixed formats file if
possible or let me know what the first two packets are supposed to be?  The
file claims they are Ethernet, but it isn't interpreting it as anything useful
yet.  I know the additional packets in that file are Token Ring and are parsed
correctly.
(3) Do you have the ability to produce captures from a "WiFi" wireless LAN?  I
need to match those packets up with the right type of 802.11 "interpreter" in
Wireshark.

I will work on support to write out CommView capture files once I'm done with
the reading portion.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.