ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Ethereal-users: RE: Re: [Ethereal-users] Shomiti/snoop format

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Joe Aiello" <Joe.Aiello@xxxxxxxxxxxx>
Date: Mon, 19 Aug 2002 11:18:02 -0700
I have been though this already.  Basically, it is easier to open the file
and grab information they need than to write it back with all the required
headers for that format.  There is a much more technical description in the
Ethereal archives if you look for the messages we exchanged about Sniffer
PRO WAN files.

Joe Aiello
Sylantro Systems
408-626-3032

 -----Original Message-----
From: 	Tony Fortunato [mailto:tony@xxxxxxxxxxxxxxx] 
Sent:	Monday, August 19, 2002 10:58 AM
To:	ethereal-users@xxxxxxxxxxxx
Subject:	Fwd: Re: [Ethereal-users] Shomiti/snoop format

I originally started talking with Guy about this, but since he's on 
vacation, I thought I'd try the group.


I found out the following when playing with the (Fluke Optiview Expert - 
OPE) Finisar product:
OK. I open an OPE capture in Ethereal.  I check what format Ethereal thinks 
its in (Tools -> Summary) and it says Sun Snoop.
Not OK.  I open an OPE trace in Ethereal, save a few packets in Sun Snoop 
format and try to open the trace file in OPE.
Not OK. I capture packets, save it in Sun Snoop format and try to open it 
in OPE.

Why would Ethereal be able to open the trace file from OPE, identify it as 
Sun Snoop but not save it in the same format.  Or am I misunderstanding
this.

I understand the spirit of submitting this information to the generic 
ethereal support address, but thought you may be interested.  If you would 
prefer I could resend this to the support address instead.  Let me know.

Regards,

>Date: Tue, 13 Aug 2002 19:55:50 -0400
>To: Guy Harris <guy@xxxxxxxxxx>
>From: Tony Fortunato <tony@xxxxxxxxxxxxxxx>
>Subject: Re: [Ethereal-users] Shomiti/snoop format
>
>I'll chat with my Finisar contacts.
>
>Thanks.
>At 04:15 PM 8/13/02, you wrote:
>>On Tue, Aug 13, 2002 at 06:33:11PM -0400, Tony Fortunato wrote:
>> > Any assistance you can give would be greatly appreciated.
>>
>>The problem you described in
>>
>>         http://www.thetechfirm.com/ethereal/To_ethereal.ppt
>>
>>is, as far as I know, already fixed, so no assistance is needed.
>>
>>The problem you mentioned in yoru recent mail:
>>
>> > I know this is an old issue, but is there a format I can save my traces
in
>> > so i can open it in my Fluke/Shomiti protocol analyzer.
>>
>>appears to be a Surveyor bug, as we write, as far as I know, 100%
>>correct snoop files; I do not work for Finisar, so I can give no
>>assistance there.
>
>Tony Fortunato, Sr Network Specialist
>The Technology Firm
>Georgetown, Ontario. Canada
>tony@xxxxxxxxxxxxxxx
>www.thetechfirm.com
>
>'Making things work better; bit by bit.'

Tony Fortunato, Sr Network Specialist
The Technology Firm
Georgetown, Ontario. Canada
tony@xxxxxxxxxxxxxxx
www.thetechfirm.com

'Making things work better; bit by bit.'

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users