Ethereal-dev: Re: [Ethereal-dev] Support for distributed sniffer format

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Bill Meier" <wmeier@xxxxxxxxxxx>
Date: Mon, 10 Apr 2006 20:19:10 -0500
> ...
> capinfos: Can't open F5Cal25eu001etl.cap: File contains record data we don't support
> (netxray: Unknown timeunit 2 for Ethernet/ETH_CAPTYPE_GIGPOD2 version 002.002 capture)
> 
> ...
> 
> Unfortunately I don't have a screepdump of the decoding on the sniffer
> box itself, but I might be able to get that in the near future. That 
> might help reverse engineer this format in more detail I guess.
> 

Bug #800 (bugs.ethereal.com) is also for "timeunit 2 for 
Ethernet/ETH_CAPTYPE_GIGPOD2".  Altho I did receive a capture file, a 
printout/screendump as below could not be supplied so I was unable to 
determine the required "ticks per second" value to fill in the entry in the 
TpS_gigpod2 array.

If at all possible, please supply a short sample capture file and a file 
showing the dates/times of the frames in the capture as shown on the sniffer.

That is: A .prn file generated by the sniffer (file ! print (to file)) 
showing the summary and detail for the first few packets of 
the capture (so I can see the relative, delta and absolute times 
as shown by the sniffer).

With these two files, I can identify and correct the problem.

(A capture file plus a screendump showing the summary and detail with the 
relative, delta and absolute times for the first several packets is OK).

(If desired, the files can be sent to my private EMail [wmeier@xxxxxxxxxxx]).

Thanks

Bill Meier