Wireshark · Ethereal-dev: Re: [ethereal-dev] netxray 1.1 files

[Guy Harris <gharris@xxxxxxxxxxxx>]

> Nope, Sniffer Pro 2.0.01 (Windows) did not like the netxray 1.1
> file produced by wiretap. The error message was:
> 
> Unable to load file: xxxxxx

It may be upset by the end offset being 0, rather than the size of the
file.  The code to write data should keep track of how much has been
writeen, and "netxray_dump_close_1_1()" should rewrite the header, with
the "end_offset" member being the total number of bytes written to the
file.

(Also, so that this works if you write the file out on a big-endian
machine, 2-byte quantities should be run through "htoles()", and 4-byte
quantities should be run through "htolel()", before being put into a
file or record header to be written.)

Some of the other header fields might also have to be set.