Ethereal-dev: Re: [Ethereal-dev] RFC: Perl NetXRay cap module

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 2 Jan 2004 15:41:20 -0800
On Fri, Jan 02, 2004 at 09:31:55AM -0600, Sanderson, George W wrote:
> What I would like to be able to do is directly read and parse the
> ".cap" files from within my Perl code.  I have not been able to find a
> Perl module that directly reads a NetXRay cap file. 

Some Perl code to read older NetXray cap files:

	http://www.netapp.com/tech_library/usenix-nt97.html

Get "response-time.tar.gz" or "response-time.zip" - the "digcap" file
contained in there is a Perl script that includes code to read snoop
captures and the old NetXRay capture file.  The code would have to be
extracted from the script, and would have to be updated to handle the
newer formats used by Sniffer for Windows.