Ethereal-dev: [Ethereal-dev] SuSE Linux 6.3 and modified libpcap file format parsing??

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Mosly Chang" <moslytw@xxxxxxxxx>
Date: Wed, 23 Aug 2006 14:58:47 +0800
-------------------
The Ethereal project is being continued at a new site.  Please go to
http://www.wireshark.org and subscribe to wireshark-dev@xxxxxxxxxxxxx.
Don't forget to unsubscribe from this list at
http://www.ethereal.com/mailman/listinfo/ethereal-dev
-------------------

hi ~everyone
I tried to develop a parser.
It is parsing about some packet file
when I tried to parse SuSE6.3 libpcap and modified  libpcap,I faced one problem.

Because the magic numbers  are the same(0x34cdb2a1)  ,I  do not know how to distinguish
them. In wireshark source code, the header does not have enough  information to parse it.
Does anyone have any idea? thx!!


_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev