Re: [ethereal-dev] Question

[guy@xxxxxxxxxx (Guy Harris)]

> Which brings me to the next two questions:
> 
> 1) How scarce is ETT_ space? Given that there are 16 different types of
> RSVP objects, can I use up 18 entries in the ETT_ list?

They're just array indices, so if you add 18 more types, that's
18*sizeof(gint) bytes worth of data space added to the "tree_type"
array; we probably won't miss 72 or so bytes....

> 2) Is there a reader for the MS Netmon capture file format?

Yes.  If you configure with "--with-wiretap", Ethereal uses the Wiretap
library to read capture files; it currently has readers for:

	"libpcap"

	Network General^H^H^H^H^H^H^HAssociates Sniffers (Ethernet,
	Token Ring, and - at least from the one capture file I was sent
	- ATM, although we discard stuff other than LANE or RFC 1483
	frames) - not Sniffer Basic (formerly known as Cinco Networks'
	NetXRay), just Sniffer Classic (the DOS application running on
	their boxes) and, I think, Sniffer Pro (the Windows replacement
	for Sniffer Classic)

	Novell LANalyzer

	Microsoft Network Monitor

	Sun "snoop"

	AIX 3.x/4.x "iptrace"

See the README file in the "wiretap" subdirectory.