Wireshark · Ethereal-dev: Re: [Ethereal-dev] reading diff. file formats how to???

["Puneet" <puneetgoel77@xxxxxxxxxxx>]

thanks for the info.

regarding .apc i meant native airopeek format. i tried to read some sample
.apc files with ethereal. it is able to read them but nowhere i found
anything specificaly mentioning .apc although etherpeek was there.

can you tell me which part deals with wildpacket's airopeek (.apc) format.

regards,
Puneet




----- Original Message -----
From: "Guy Harris" <guy@xxxxxxxxxxxx>
To: "Puneet" <puneetgoel77@xxxxxxxxxxx>
Cc: <ethereal-dev@xxxxxxxxxxxx>
Sent: Saturday, July 26, 2003 11:43 AM
Subject: Re: [Ethereal-dev] reading diff. file formats how to???


> On Sat, Jul 26, 2003 at 11:31:57AM +0530, Puneet wrote:
> > I am looking for modules in ethereal where it reads the .cap file and
> > .apc files formats.
>
> The code to read capture files is in the "wiretap" subdirectory of the
> source.  There are several different types of capture file that, on
> Windows, have ".cap" as a suffix, so there are several modules that can
> read ".cap files", such as "wiretap/netxray.c" for NetXRay and Windows
> Sniffer files and "wiretap/netmon.c" for Microsoft Network Monitor
> files.
>
> I infer from your reference to WinPcap that you might be familiar with
> Analyzer, which I *think* uses ".apc" as the suffix for native
> libpcap/WinPcap format, which is also the native format for Ethereal and
> tcpdump/WinDump.  If so, then "wiretap/libpcap.c" is the file that reads
> those files.  I don't know which of those Analyzer considers to be ".cap
> files".
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>