Ethereal-users: Re: [Ethereal-users] Ethereal file format

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 03 Mar 2006 11:45:58 -0800
Andreas Fink wrote:
look at the source of text2pcap or check out the libpcap documentation (www.tcpdump.org)
...and then note that the libpcap documentation mentions routines to create and write libpcap-format files (that's the format that Ethereal uses). pcap_dump_open() requires a pcap_t, but with newer versions of libpcap you can use pcap_open_dead() to create a fake one.