Wireshark · Ethereal-users: Re: [Ethereal-users] Need a way to read PacketScan (GL Communications) trace file

[Guy Harris <gharris@xxxxxxxxx>]

Cohen, Harvey S, ALABS wrote:
> I just started using PacketScan (Gl Communications, www.gl.com 
> <http://www.gl.com>) .
> I would like to give traces to people who only have Ethereal.
> Is there a way to convert a PacketScan trace file to something Ethereal 
> can read?

Yes, if you know the format of traces from PacketScan and can write a 
program to read those traces and write a trace in libpcap format. 
Writing traces in libpcap format is fairly easy to do if you have recent 
versions of libpcap/WinPcap.  Reading the PacketScan trace format is 
easy to do only if you already know the format of PacketScan traces or 
can get a document describing that format; otherwise, you'll have to 
reverse-engineer that format, which could be a lot of work.

If you know that format, however, you could just write code to add to 
Ethereal's Wiretap library, so that it could *directly* read those captures.