SuSE Linux 6.3 and modified libpcap file format parsing??
"Mosly Chang" <[email protected]> Wed, 23 Aug 2006 14:58:47 +0800
| Newsgroups | gmane.network.ethereal.devel |
|---|---|
| Message-ID | <[email protected]> |
--===============0549319307== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------- The Ethereal project is being continued at a new site. Please go to http://www.wireshark.org and subscribe to [email protected]. Don't forget to unsubscribe from this list at http://www.ethereal.com/mailman/listinfo/ethereal-dev ------------------- --===============0549319307== Content-Type: multipart/alternative; boundary="----=_Part_22341_8542262.1156316327005" ------=_Part_22341_8542262.1156316327005 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline hi ~everyone I tried to develop a parser. It is parsing about some packet file when I tried to parse SuSE6.3 libpcap and modified libpcap,I faced one problem. Because the magic numbers are the same(0x34cdb2a1) ,I do not know how to distinguish them. In wireshark source code, the header does not have enough information to parse it. Does anyone have any idea? thx!! ------=_Part_22341_8542262.1156316327005 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline hi ~everyone<br>I tried to develop a parser.<br>It is parsing about some packet file<br>when I tried to parse SuSE6.3 libpcap and modified libpcap,I faced one problem.<br><br>Because the magic numbers are the same(0x34cdb2a1) ,I do not know how to distinguish <br>them. In wireshark source code, the header does not have enough information to parse it.<br>Does anyone have any idea? thx!!<br><br><br> ------=_Part_22341_8542262.1156316327005-- --===============0549319307== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Ethereal-dev mailing list [email protected] http://www.ethereal.com/mailman/listinfo/ethereal-dev --===============0549319307==--