I believe Jay was quoting a paragraph from
http://www.ethereal.com/tethereal.1.html where
there are a set of bolded words like "Toshiba's"
and "RADCOM's". This might lead one to believe
that they are acceptable values for the "-F"
flag.
I believe Jay's root question (which I have had
also) is:
What are the acceptable values for the "-F"
flag and what do they map to?
I pulled apart the code of wiretap/file.c to put
together this table. The third column is the string acceptable
as an arguement to the "-F" option. 'NULL' indicates that
there is no acceptable value, so the file type is essentially
read only based on automagic recognition of the file type.
WTAP_FILE_WTAP, "Wiretap (Ethereal)", NULL
WTAP_FILE_PCAP, "libpcap (tcpdump, Ethereal, etc.)", "libpcap"
WTAP_FILE_PCAP_SS990417, "Red Hat Linux 6.1 libpcap (tcpdump)",
"rh6_1libpcap"
WTAP_FILE_PCAP_SS990915, "SuSE Linux 6.3 libpcap (tcpdump)",
"suse6_3libpcap"
WTAP_FILE_PCAP_SS991029, "modified libpcap (tcpdump)", "modlibpcap"
WTAP_FILE_PCAP_NOKIA, "Nokia libpcap (tcpdump)", "nokialibpcap"
WTAP_FILE_LANALYZER, "Novell LANalyzer", NULL
WTAP_FILE_NGSNIFFER_UNCOMPRESSED, "Network Associates Sniffer
(DOS-based)", "ngsniffer"
WTAP_FILE_NGSNIFFER_COMPRESSED, "Network Associates Sniffer (DOS-based),
compressed", "ngsniffer_comp"
WTAP_FILE_SNOOP, "Sun snoop", "snoop"
WTAP_FILE_IPTRACE_1_0, "AIX iptrace 1.0", NULL
WTAP_FILE_IPTRACE_2_0, "AIX iptrace 2.0", NULL
WTAP_FILE_NETMON_1_x, "Microsoft Network Monitor 1.x", "netmon1"
WTAP_FILE_NETMON_2_x, "Microsoft Network Monitor 2.x", "netmon2"
WTAP_FILE_NETXRAY_1_0, "Cinco Networks NetXRay", NULL
WTAP_FILE_NETXRAY_1_1, "Network Associates Sniffer (Windows-based) 1.1",
"ngwsniffer_1_1"
WTAP_FILE_NETXRAY_2_00x, "Network Associates Sniffer (Windows-based)
2.00x", NULL
WTAP_FILE_RADCOM, "RADCOM WAN/LAN analyzer", NULL
WTAP_FILE_ASCEND, "Lucent/Ascend access server trace", NULL
WTAP_FILE_NETTL, "HP-UX nettl trace", NULL
WTAP_FILE_TOSHIBA, "Toshiba Compact ISDN Router snoop trace", NULL
WTAP_FILE_I4BTRACE, "I4B ISDN trace", NULL
WTAP_FILE_CSIDS, "CSIDS IPLog", NULL
WTAP_FILE_PPPDUMP, "pppd log (pppdump format)", NULL
WTAP_FILE_ETHERPEEK_MAC_V56, "Etherpeek trace (Macintosh V5 & V6)", NULL
WTAP_FILE_ETHERPEEK_MAC_V7, "Etherpeek trace (Macintosh V7)", NULL
