ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] query on adding new field in trace record...

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 11 Oct 2011 00:35:39 -0700
On Oct 11, 2011, at 12:13 AM, Krishna Khanal wrote:

> Yes, its "trace record" in .cap file format.

There is no such thing as ".cap file format"; there are at least two different capture file types for which the extension ".cap" is used - the NetXRay/Windows Sniffer format and the Microsoft Network Monitor format.  There are probably more, as the authors of network analyzers have not been as creative as they perhaps should have been when choosing extensions, so they just chose ".cap" for "capture".

To which of those formats are you referring?