Which capture file formats does Network Timeout accept?
• Pcap Format. Network Timeout supports network packet captures in the pcap format. Open-source freeware tools are available for gathering network packet captures in the pcap format, notably Wireshark and tcpdump. Many common enterprise sniffers, such as NetScout nGenius and Network Instruments Observer, have the option of exporting network packet captures in the pcap format. If you already have network packet captures in formats other than pcap, you can convert many of them to pcap using editcap and tshark (see supported formats for conversion in Q1.13 of the Wireshark FAQ). For example, to convert capture files from Sniffer (.enc) format, use tshark as follows: tshark -r capture.enc -w capture.pcap. • L2 Device. Since Network Timeout performs analysis at L2, the packet capture must be taken from an ethernet or 802.11 device. Packet captures taken from L3 devices such as PPP or tun devices will not work. “Linux cooked” captures also will not work. • Full-Length Frames. Since Network T
