Ethereal-dev: Re: [Ethereal-dev] particular snoop output

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Mon, 18 Oct 2004 16:35:14 -0700 (PDT)
netsc@xxxxxxxxxx said:
> I work a lot with NetScreen firewall (now Juniper) and there is an
> integrated snoop feature to capture traffic arriving/living the device.
>
> It would be really helpfull to have the ability to import snoop captured
> data into ethereal for further analyse. There is unfortunately some extra
> data compared to standard snoop output.

In the context of Ethereal, "snoop output" refers to the output of the
SunOS 5.x "snoop" command (and the output of commands that use the same
file format), as documented in RFC 1761.

Is that what you're referring to when you say "standard snoop output"?

Or are the capture files from the NetScreen firewall in a format *other*
than something based on RFC 1761 "snoop" format?