On Mon, Aug 05, 2002 at 03:17:22AM +0930, Richard Sharpe wrote:
> > I have noticed you are the one behind the EditCap utility.
>
> I seem to remember being the original author, as it overcame a deficiency
> in Ethereal that is now largly gone.
I.e., you can now, in Ethereal, mark particular frames and say "save
only the marked frames" or "save only the unmarked frames"?
> > I noticed it support RADCOM analyzer and also Sniffer .CAP files.
>
> This support is all because libwiretap supports a large number of formats.
> I am not sure that RADCOM's format is there, but it might be, especially
> if RadCom uses an existing format.
At least one RADCOM file format is there. The checkin comment for
"wiretap/radcom.c" says:
Olivier Abad's patch to add dissectors for LAP-B and X.25, and
wiretap support for RADCOM Ltd.'s WAN/LAN analyzers (see
http://www.radcom-inc.com/
).
> > I wonder whether RADCOM format you are using is up to date and whether you
> > are interesting in RADCOM new analyzer (The Performer) format.
>
> I am not sure. We would appreciate it if it were kept up to date.
I don't know if it's up-to-date; it looks as if Olivier
reverse-engineered the format.
We'd be happy to get
changes to implement (or even just document in comments) stuff
he didn't manage to reverse-engineer;
updates for changes to that format;
code to additional new formats, such as Performer format.
