Ethereal-dev: Re: [ethereal-dev] other sniffers

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 11 Nov 1999 11:52:49 -0800 (PST)
> Plus it also saves to a "RAW" packet format, but this isn't too useful
> either.  Not even sure why it is there.  It writes all the packets, one
> after the other, into a binary file.  I'm not sure what you could even do
> with such a file.

Without any header information saying how big the packet is?

I guess that might work for link layers that include a length field, as
long as, when reading the file, you know what link layer you're dealing
with - and as long as there's no "snap length" chopping packets short -
but if you don't know how long the packet is, it's not clear how you'd
be able to read that file.