Wireshark · Ethereal-users: [Ethereal-users] comparing two files

[Earl Eiland <eee@xxxxxxx>]

I have to compare two files, one being packets going onto a firewall,
and one packets leaving the firewall.  I then need to create a new file
of packets dropped by said firewall.

I presume this ability is not built into Ethereal.  Where can I find
information on Ethereal's file structure, so I can build a parser?

Earl Eiland