Ethereal-dev: Re: [Ethereal-dev] mergecap: How to merge Ethernet & Linuxcookedcapture files?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 22 Feb 2006 11:29:45 -0800
Maynard, Chris wrote:
I'll leave the question to Guy and the rest of you experts, but when I
was searching through the mailing list posts, I found a post from Guy
back in July 2001 indicating that Etherpeek,

...which doesn't support Linux cooked link-layer headers;

i4btrace for BSD,

...which doesn't support Linux cooked link-layer headers;

iptrace for AIX

...which doesn't support Linux cooked link-layer headers;

and the Toshiba TR-600 & TR-650 formats

...which doesn't support Linux cooked link-layer headers.

also apparently support per-packet encapsulations

You need more than just support for per-packet encapsulations - you need support for Linux cooked link-layer headers. Note that we don't control *any* of those capture file formats, so we can't add support for any link-layer type of our own choice to them.