Ethereal-dev: Re: [ethereal-dev] Null capture type ...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Fri, 03 Dec 1999 00:37:58 -0600
On Fri, Dec 03, 1999 at 02:52:07AM +1000, Richard Sharpe wrote:
> Hi,
> 
> Hmmm, a little experimentation, producing a Null capture with my little
> program shows me that Ethereal already understands a capture file that
> starts with
> 
>    0xFF000800 
> 
> as long as it is set as a NULL ENCAP type in the Wiretap file ...
> 
> Hmmm, I wonder if I only need a flag to force Ethereal to treat the
> contents of a file as NULL ..., like -N ...

What type of trace file is it? Libpcap, netmon, ... ?

--gilbert