Ethereal-dev: Re: Re : Re: [Ethereal-dev] particular snoop output

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gilbertr@xxxxxxxxx>
Date: Thu, 21 Oct 2004 08:21:54 -0500
Have you tried running text2pcap, which comes with the Ethereal
distribution, to convert your hex dump to a pcap file?

--gilbert


On Thu, 21 Oct 2004 14:46:38 +0200, netsc@xxxxxxxxxx <netsc@xxxxxxxxxx> wrote:
> Right ... sorry for that.
> However I'am afraid but I have no way to retrieve a raw file from the juniper.
> I have to check with us the ability to add this on their "snoop" feature.
> 
> I'll come back with more serious data
> 
> Thanks anyway
> Florent
> 
> >-- Message original --
> >Date: Tue, 19 Oct 2004 11:35:43 -0700
> >From: Guy Harris <gharris@xxxxxxxxx>
> >To: Ethereal development <ethereal-dev@xxxxxxxxxxxx>
> >Subject: Re: Re : Re: [Ethereal-dev] particular snoop output
> >Reply-To: Ethereal development <ethereal-dev@xxxxxxxxxxxx>
> 
> 
> >
> >
> >netsc@xxxxxxxxxx wrote:
> >
> >> Unfortunately the format of netscreen snoop is something other than the
> >standard
> >> one (rfc 1761).
> >>
> >> Please find attach both sunOS 5.8 and netscreen snoop output for your
> review
> >> (same packet captured).
> >
> >Neither of those two files are RFC 1761 format (which is the snoop file
> 
> >format Ethereal reads); they're just text output.
> >
> >We'd need a raw NetScreen snoop file in order to figure out how to read
> 
> >the NetScreen file.
> >
> >_______________________________________________
> >Ethereal-dev mailing list
> >Ethereal-dev@xxxxxxxxxxxx
> >http://www.ethereal.com/mailman/listinfo/ethereal-dev
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
> 
>