Wireshark · Ethereal-dev: [Ethereal-dev] Ethereal output file format

["David Lin" <dyslin@xxxxxxxx>]

Hi,

I used Ethereal to capture lot of network traffic.

However, I only need to extract the TCP/IP header info.

I thought about parsing the output file using a program,

However, I have trouble figuring out the format of the output file.

Can anyone tell me the exact format, I notice for each packet, it inserted some type of frame info right before it.

Or is there a simpler way to do what I want to do.

 

-- David