Ethereal-users: RE: [Ethereal-users] Format of Etheral pcap files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Andrew Chalk" <achalk@xxxxxxxxxxxxxxxxxxxxxx>
Date: Sun, 30 Jul 2006 13:43:20 -0500
-------------------
The Ethereal project is being continued at a new site.  Please go to
http://www.wireshark.org and subscribe to wireshark-users@xxxxxxxxxxxxx.
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-users
-------------------

Many thanks.

-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: Saturday, July 29, 2006 12:41 PM
To: Ethereal user support
Subject: Re: [Ethereal-users] Format of Etheral pcap files

Andrew Chalk wrote:
> My original question wasn't very clear. I want to send the packets in the
> capture file over the network to test an app. that is supposed to capture
> them. For example, I could send them with WinPcap. Given that scenario,
does
> the ethereal dump contain the original packet data is it encoded? Is there
a
> header, etc?

At least for Ethernet, yes - what the packet contains is the original 
packet data, byte for byte.
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users