Ethereal-users: Re: [Ethereal-users] Adding new protocols without recompiling?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 18 Aug 2001 14:07:57 -0700
On Wed, Aug 15, 2001 at 12:50:32PM +0200, Carsten Fuchs wrote:
> Ok, no problem. I simply didn't realize earlier that the file format
> of libpcap is that simple.

Not only is it simple, but there's even a library to read that format,
called, err, umm, "libpcap". :-)

I.e....

> I've written a simple decoder for that file format

...there should rarely be a need to write a decoder for it - just write
an application that uses "pcap_open_offline()" and "pcap_loop()".