Ethereal-dev: Re: [Ethereal-dev] RFC: Perl NetXRay cap module

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx>
Date: Fri, 2 Jan 2004 16:48:16 -0800 (PST)
On Fri, 2 Jan 2004, Sanderson, George W wrote:
 
> I currently have a Perl module that analyzes Sniffer summary ASCII 
> print files.
> Network Associates has been changing their print file formats and the 
> time required to generate these text files is prohibitive.
> 
> What I would like to be able to do is directly read and parse the 
> ".cap" files from within my Perl code.
> I have not been able to find a Perl module that directly reads a 
> NetXRay cap file.
> 
> Does anyone know of such a module?  Does anyone think that such a 
> module would be useful?
> 
> I was thinking that the C routines in wiretap/netxray.c could be hooked 
> into a Perl module in order to read a cap file and that the NetPacket 
> Perl module could be used to parse the raw packet data.

What might be more interesting is if the whole wiretap library were made 
available in Perl.

Do you absolutely need NetXRay?

Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com