Ethereal-dev: [Ethereal-dev] Ethereal decode of Net X-Ray

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Piccola,Richard M." <rpiccola@xxxxxxxxx>
Date: Wed, 18 Oct 2000 10:13:17 -0400
I have used your Ethereal product to do some summary print dumps of Net
X-Ray files, from Net X-Ray version 3.0.3, with some success.

For what I'm doing, I have tons of files to examine, and to determine
which ones to process, I need to open each one to see the time stamps. 
I'd like to automate that process, by writing a short program to open a
list of Net X-Ray .CAP files, grab the time stamps of the first and last
packets, and dump the results to a text file.

To do that, I'd clearly need an understanding of the proprietary (?) Net
X-Ray file format. I thought I'd ask you if you could give me some
direction so I can decipher the files and get what I need.  I'm not sure
how else to get the information, or even where to start looking. 
Obviously you know how to do it.  Any help you could offer would be
greatly appreciated.  

Respectfully,

Richard Piccola
begin:vcard 
n:Piccola;Richard M.
tel;work:(732) 389-5694
x-mozilla-html:FALSE
org:Mitre Corporation;W072
adr:;;12 Christopher Way;Eatontown;NJ;07724;
version:2.1
email;internet:rpiccola@xxxxxxxxx
title:Senior Communications Engineer
fn:Richard M. Piccola
end:vcard