> Which brings me to the next two questions:
>
> 1) How scarce is ETT_ space? Given that there are 16 different types of
> RSVP objects, can I use up 18 entries in the ETT_ list?
They're just array indices, so if you add 18 more types, that's
18*sizeof(gint) bytes worth of data space added to the "tree_type"
array; we probably won't miss 72 or so bytes....
> 2) Is there a reader for the MS Netmon capture file format?
Yes. If you configure with "--with-wiretap", Ethereal uses the Wiretap
library to read capture files; it currently has readers for:
"libpcap"
Network General^H^H^H^H^H^H^HAssociates Sniffers (Ethernet,
Token Ring, and - at least from the one capture file I was sent
- ATM, although we discard stuff other than LANE or RFC 1483
frames) - not Sniffer Basic (formerly known as Cinco Networks'
NetXRay), just Sniffer Classic (the DOS application running on
their boxes) and, I think, Sniffer Pro (the Windows replacement
for Sniffer Classic)
Novell LANalyzer
Microsoft Network Monitor
Sun "snoop"
AIX 3.x/4.x "iptrace"
See the README file in the "wiretap" subdirectory.
