Ethereal-dev: Re: [Ethereal-dev] FW1 monitor dissector patch

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 26 Jun 2002 18:18:27 -0700
On Thu, Jun 27, 2002 at 03:10:38AM +0200, Alfred Koebler wrote:
> this is a patch with a dissector for FW1 monitor files.

What's the format of an FW1 (Firewall-1?) monitor file?

Does it look exactly like a tcpdump DLT_EN10MB file (i.e., just like an
Ethernet capture from tcpdump or Ethereal, complete with 0xa1b2c3d4 at
the beginning)), but with special magic values in the destination
address?