Re: Format of Etheral pcap files

Andrew Chalk wrote:
> My original question wasn't very clear. I want to send the packets in the
> capture file over the network to test an app. that is supposed to capture
> them. For example, I could send them with WinPcap. Given that scenario, does
> the ethereal dump contain the original packet data is it encoded? Is there a
> header, etc?

At least for Ethernet, yes - what the packet contains is the original 
packet data, byte for byte.