Wireshark · Wireshark-dev: Re: [Wireshark-dev] get a pcapNG file

[Tyson Key <tyson.key@xxxxxxxxx>]

Hi Soltani. 
The latest SVN versions of Wireshark support multiple link types in pcap-ng files, although to capture on non-Ethernet link types you have to use dumpcap. There was an issue where pcap-ng files created by earlier versions of Wireshark weren't being handled by newer versions, and vice-versa (i.e. packets appear, but link type information is missing). 

If they help, there are a number of sample files at http://wiki.wireshark.org/Development/PcapNg, at http://code.google.com/p/understand/downloads/list and there might be some floating around this mailing list, although most were sent to developers off-list to examine, from what I can tell.

If you need anything else, just ask.

Tyson.

On Wed, May 27, 2009 at 10:37 AM, SOLTANI FATEN <Faten.Soltani@xxxxxxxxxxxxxxxxxx> wrote:

Hi helpful people
I want to know if Wireshark is able to read a PcapNG file or not, that's
why I'm looking for an example of PcapNG file.
Someone can tell me where I can find that
Regards
Faten

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe

-- 
Fight Internet Censorship! http://www.eff.org
               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
http://i9.house404.co.uk/ | Twitter/FriendFeed/Skype: vmlemon | +447549728105