ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-users: RE: [Ethereal-users] Ethereal version 0.9.1 - foreign file format conversion

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Wed, 27 Feb 2002 01:00:25 -0800
Hi,

Thank you for the response. I used the below command.

c:> editcap C:\SSSimple.tla mylibcp.libcap


I'm getting error telling:

"editcap: Can't open SSSimple.tla file : The file is 
	    not the Capture file in the known format".

Let me explain about my file "SSSimple.tla". This is
a file which is captured by a Tektronix Logic Analyzer.
This file format has many other information about the GUI
display on the Logic Analyzer. Apart from this it has
packet information acquired from a Ethernet port. So its 
not a capture file as expected by Editcap. 

Actually .tla file is our proprietary file format.

How can I convert such file into libcap or whatever Ethereal
understands?. Please help.

Thank You,
Sachin

-----Original Message-----
From: Guy Harris [mailto:gharris@xxxxxxxxx]
Sent: Wednesday, February 27, 2002 12:09 PM
To: Chavan, Sachindeo V
Cc: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] Ethereal version 0.9.1 - foreign file
format conversion to .libca p format?


On Tue, Feb 26, 2002 at 10:07:49PM -0800, sachindeo.v.chavan@xxxxxxxxxxxxxx
wrote:
> 	I'm Sachin from India. I have downloaded Ethereal version 0.9.1, I'm
> just using this software to see the decoding of protocols.
> I have a file which stores the Ethernet frames, PPP packets, but this file
> format is our own proprietary format which Ethereal does not support. As
we
> know Ethereal understands .libcap format, can any one tell me how to
convert
> my file format into .libcap(or whatever Ethereal SW demands)?.

Well, one way of doing that would be to make the "editcap" utility,
which comes with Ethereal, convert your file format.

However, the way you do that is to make Ethereal support your file
format, as "editcap" and Ethereal use the same library to read files;
the library is in the "wiretap" subdirectory of the Ethereal source.