Ethereal-users: Re: [Ethereal-users] New User - How do I cpature/save Cisco Debugs For Analysis

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 20 Jun 2002 15:18:38 -0700
On Fri, Jun 21, 2002 at 12:09:25AM +0200, M.C. van den Bovenkamp wrote:
> If either of the interfaces is not Ethernet, that's not the case, anf 
> Funky Stuff happens when the output of the script gets fed to text2pcap 
> :-). But perhaps something could be reverse-enineered about the 
> resulting hexdump (fake addresses and using only select bits of it?). I 
> haven't looked at it that deeply (yet?).

Well, if the interface was a Token Ring interface, for example, perhaps
Correct Stuff would happen if you ran text2pcap with "-l 6" to tell
text2pcap to mark the output file as a Token Ring capture rather than an
Ethernet capture.

There may be other interface types for which that can be made to work
(e.g., FDDI, with "-l 10"); WAN interfaces might be trickier, as I don't
know whether the header would be a PPP header or would include
WAN-type-specific headers.