Re: tcpdump sample

Guy Harris <[email protected]> Thu, 31 Aug 2006 18:24:51 -0700
Newsgroups gmane.network.ethereal.devel
Message-ID <[email protected]>
-------------------
The Ethereal project is being continued at a new site.  Please go to
http://www.wireshark.org and subscribe to [email protected].
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-dev
-------------------


On Aug 29, 2006, at 10:54 PM, Viral Mehta wrote:

> -------------------
> The Ethereal project is being continued at a new site.  Please go to
> http://www.wireshark.org and subscribe to [email protected].
> Don't forget to unsubscribe from this list at
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
> -------------------
>
> Hi all,
>
> Can you suggest me a location for TCPDUMP sample file.?
Try

	http://wiki.wireshark.org/SampleCaptures

(note the "wireshark.org", as per the note added to your message).
> But, I want a file which is written on Big Endian Machine=85
Try that and, on a system with the "file" command, try running "file" =20=

on the capture files.  Modern versions of "file" will report whether a =20=

"tcpdump capture file" is big-endian or little-endian.
> I have found lots of which were written on little endian=85 I want to =20=

> open both on my Machine and wants to see the change=85
What change are you expecting to see?  (I wouldn't expect to see any =20
change.)