Re: [Wireshark-dev] [tcpdump-workers] Which versions of pcap files accept pcap_open_offline()?

2008-03-11 Thread Guy Harris
On Mar 11, 2008, at 1:15 PM, Stephen Donnelly wrote: When you save a capture in libpcap format Wireshark doesn't prompt you for which DLT to use? No. That's supposed to happen automatically. How does it decide which DLT is appropriate? It decides based on the encapsulation type of the in

Re: [tcpdump-workers] Which versions of pcap files accept

2008-03-11 Thread Stephen Donnelly
On Tue, 2008-03-11 at 01:04 -0700, Guy Harris wrote: > vcarela wrote: > > > The problem is that if I capture with wireshark a trace from my eth0 > > connection and I save it as a "Wireshark/tcpdump/...-libpcap" file. Then > > when I run the sniffer with this pcap trace the sniffer runs properly.

Re: [tcpdump-workers] Which versions of pcap files accept pcap_open_offline()?

2008-03-11 Thread Guy Harris
vcarela wrote: The problem is that if I capture with wireshark a trace from my eth0 connection and I save it as a "Wireshark/tcpdump/...-libpcap" file. Then when I run the sniffer with this pcap trace the sniffer runs properly. But if I open a .erf trace from a DAG card with wireshark and I sav