RE: Format of Etheral pcap files
"Andrew Chalk" <[email protected]> Sun, 30 Jul 2006 13:43:20 -0500
| Newsgroups | gmane.network.ethereal.user |
|---|---|
| Message-ID | <053601c6b408$07c44880$0600a8c0@ajc2> |
------------------- The Ethereal project is being continued at a new site. Please go to http://www.wireshark.org and subscribe to [email protected]. Don't forget to unsubscribe from this list at http://www.ethereal.com/mailman/listinfo/ethereal-users ------------------- Many thanks. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Guy Harris Sent: Saturday, July 29, 2006 12:41 PM To: Ethereal user support Subject: Re: [Ethereal-users] Format of Etheral pcap files Andrew Chalk wrote: > My original question wasn't very clear. I want to send the packets in the > capture file over the network to test an app. that is supposed to capture > them. For example, I could send them with WinPcap. Given that scenario, does > the ethereal dump contain the original packet data is it encoded? Is there a > header, etc? At least for Ethernet, yes - what the packet contains is the original packet data, byte for byte. _______________________________________________ Ethereal-users mailing list [email protected] http://www.ethereal.com/mailman/listinfo/ethereal-users