Hello, here's my US$.02 worth. We use both Distributed Sniffer (DS) and Ethereal at Sandia Labs. Whenever I want to use some of DS's "expert" modes I save the Ethereal capture using the Network Associates Sniffer (Dos-Based) .enc file format that NAI recommended. I've never seen any problems with reading Ethereal captures into DS. Anyway you can make a sanitized pcap capture available for download so I could load it with DS?
diana eichert -----Original Message----- From: Richard Sharpe [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 07, 2003 6:02 PM To: Herman, Matthew Cc: [EMAIL PROTECTED] Subject: [Ethereal-dev] RE: Question on Ethereal On Tue, 7 Oct 2003, Herman, Matthew wrote: > We are using Sniffer Distributed Release 4.2. I am also using Ethereal > version 0.9.15 (c) and also reading the users manual guide htm. > What I did was to create my own directory named c:\Matt's captures > It has a drop down box that gives you a bunch of file formats that you can > save captures to. The choices that apply to me are > File type: > Network Associates Sniffer (Dos-Based) > Network Associates Sniffer (Windows based) 1.1 > Network Associated Sniffer (Windows-based) 2.00x > I called network Associates and the tech said to try the first format that > they developed that is .enc he said it is open and most people use it now.
