Re: .dmp file format...
Guy Harris <[email protected]>
| Newsgroups | gmane.network.ethereal.user |
|---|---|
| Message-ID | <[email protected]> |
ravi patil wrote: > i want to develop a application for which i want to read the .dmp file. > can anybody tell me the .dmp file format. what its header contain & all > other information... What's a ".dmp" file? If that's the file format that Ethereal/Wireshark reads and writes by default (for which there's no "official" standard suffix - it originated on UN*X, in the command-line tcpdump program, so there wasn't a standard suffix assigned to it), then the best way to describe the format is "the format supported by the libpcap/WinPcap library". The best way to read it is not to write your own code to understand the format, the best way to read it is to use libpcap/WinPcap to read it; it means you write less code (you don't have to write code to understand the file format), and the code you do write will continue to work with pcap-ng files when that's supported by libpcap/WinPcap and Wireshark. If you're using UN*X, try "man pcap" or see http://www.tcpdump.org/pcap3_man.html If you're using Windows, see http://www.winpcap.org/docs/docs31/html/main.html