Can Wireshark read capture files from {your favorite network analyzer}?
Support for particular protocols is added to Wireshark as a result of people contributing that support; no formal plans for adding support for particular protocols in particular future releases exist. If a network analyzer writes out files in a format already supported by Wireshark (e.g., in libpcap format), Wireshark may already be able to read them, unless the analyzer has added its own proprietary extensions to that format. If a network analyzer writes out files in its own format, or has added proprietary extensions to another format, in order to make Wireshark read captures from that network analyzer, we would either have to have a specification for the file format, or the extensions, sufficient to give us enough information to read the parts of the file relevant to Wireshark, or would need at least one capture file in that format AND a detailed textual analysis of the packets in that capture file (showing packet time stamps, packet lengths, and the top-level packet header) in orde
Related Questions
- When I capture with Wireshark, why can I see any TCP packets other than packets to and from my machine, even though another analyzer on the network sees those packets?
- Can the WebLab Viewer read molecule text files originating from Windows or UNIX computers?
- Can IAT read PNG (Portable Network Graphics) files?
