EMCOM admits they don't send the proper format over - I think they strip parts off. I was just curious to see if I could specify where in the frame different pieces of information are for future analysis. Doesn't sound like it.
Thanks,
Steve
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx]On Behalf Of Guy Harris
Sent: Wednesday, September 08, 2004 2:22 PM
To: Ethereal user support
Subject: Re: [Ethereal-users] Formatting existing frames
Tindall, Steve said:
> I have a frame relay trace file from a company called EMCOM that can be
> exported to a .SYC file, but neither Ethereal nor Sniffer can read the
> header info, IP address, or ports.
I.e., there's a bug in whatever software is doing the exporting, and it's
not writing valid Frame Relay Sniffer files?
> I know where they are in the frame, so
> is there a way that I can modify how these frames are interpreted?
Not without making private modifications to Ethereal.
It might be easier to write a program to read the broken .syc files and
write out valid ones. Is it sticking extra information at the beginning
of the frames, before the Frame Relay header?
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
