-------------------
The Ethereal project is being continued at a new site. Please go to
http://www.wireshark.org and subscribe to wireshark-dev@xxxxxxxxxxxxx.
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-dev
-------------------
Hi,
I am analyzing tcpdump file.
I want to know how endianness can affect when file is being written.
Or rather, who affects? Application which is writing? or Network byte
order? or what?
I read somewhere that magic number of a tcpdump file can be either
0xa1b2c3d4 or 0xd4c3b2a1. How can it be? If endianness is architecture
dependant then how would I know that I have to swap 2 bytes or 4 bytes?
really, A bit confusing...
One more thing, does this file have any extension? .tcpdump or .cap
I mean there are so many possible or there is not anything like that.. one
can recognise file from its magic number only...
eInfochips Business Disclaimer:
This message may contain confidential, proprietary or legally Privileged information. In case you are not the original intended Recipient of the message, you must not, directly or indirectly, use, Disclose, distribute, print, or copy any part of this message and you are requested to delete it and inform the sender. Any views expressed in this message are those of the individual sender unless otherwise stated. Nothing contained in this message shall be construed as an offer or acceptance of any offer by eInfochips Limited and/or eInfochips Inc("eInfochips") unless sent with that express intent and with due authority of eInfochips. eInfochips has taken enough precautions to prevent the spread of viruses. However the company accepts no liability for any damage caused by any virus transmitted by this email.
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev
