Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] patch to add a new capture file format

From: Ravi Kondamuru <ravikondamuru@xxxxxxxxx>
Date: Thu, 28 May 2009 13:32:28 -0700

Thats right. I am referring to file format generated by the netscaler packet tracing program.

Jaap,
I have attached a sample trace file and the patch for review to checkin to 3457 <https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3457>

thanks,
Ravi.

---------- Forwarded message ----------
From: Bill Meier <wmeier@xxxxxxxxxxx>
To: Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
Date: Mon, 11 May 2009 16:18:02 -0400
Subject: Re: [Wireshark-dev] patch to add a new capture file format
Ravi Kondamuru wrote:
Hi,

I have created an enhancement request
3457<https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3457> to
provide a patch to support citrix netscaler capture file format.
Apart from the source patch is there any additional information required to
be attached to the enhancement request.
Also, once the patch/info is provided how long does it take before it is
included into the wireshark distribution?



A quick look at the netscaler documentation indicates that there's a netscaler program called nstrace which can produce files in something called "nstrace format" (and apparently also in tcpdump (pcap) format)).

I'm guessing that the "citrix netscaler capture file format" you refer to above is the "nstrace format" output from nstrace.

Is this correct?.