Probably the best thing to do is to support the pcap format, and to
register when them any link-layer types
that you need that aren't currently known by libpcap. Look at
www.tcpdump.org ; join the tcpdump-workers
mailing list (which treats libpcap issues, too.)
That said, adding a new file format to the wiretap library in Ethereal is
not difficult, but if your tool produces
pcap-compatible files, tools that don't use the library but do use the
libpcap library will be able to read
your traces.
--gilbert
"Peter Dons Tychsen" <pbk3012@xxxxxx>@ethereal.com on 12/22/2000 10:05:07
AM
Please respond to donpedro@xxxxxx
Sent by: ethereal-dev-admin@xxxxxxxxxxxx
To: ethereal-dev@xxxxxxxxxxxx
cc:
Subject: [Ethereal-dev] Flexible file formats
Hello ethereal developers.
I have i little question/problem.
I am creating a packet trace (sniffer) function for a series of
routers. The router supports many different interfaces (ISDN/WAN/LAN)
and protcols (IP/TCP/PPP/HLDC....). In what file format should i save
the output in to be as compatible with ethereal as possible. What
format is most flexible?
If no suitable format was available, i was considering to create my own
format and then develop at suitable driver for ETHEREAL. How
complicated is the process of inserting a new format into Ethereal?
Hope you guys can help me.
Peter Dons Tychsen, Intel, Denmark
PS: Love eathereal... cool tool.
-----------------------------------------
Peter Dons Tychsen
Email: donpedro@xxxxxx
-----------------------------------------
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev
