CAP file extension 1

[arguello]

Where can I find information about the Sniffer capture file CAP extension layout?

Thanks in advance

 

[marcosR]

What kind of info are you looking for?

 

[arguello]

I need the CAP extension layout, because I'm trying (along with a co-worker)to put the sniffer captured trace file in a repository for future graphing/analysis using especific fields. I have to manipulate the captured trace file fields, for example: absolute time, delta time, IP addresses, etc. That's why I need the layout.
Any help is welcome.
Thanks,
Luis

 

[DigitalHeMan]

Hi Luis,

The CAP file format is proprietary, but you will probably find most of the information you require when you export the trace file in csv format. Then you can view the info in Excel or similar software that can read csv files

Regards

Simon

 

[barniclebill]

You can also Print to file and open in Word.

 

[fortunat]

Hi folks,

Sniffer Pro 4.7 has modified the output file to the point where it isn't 'easy' or 'obvious' to create throughput charts anymore.

If you go to my website under the NAI link you'll see how I was able to do it before. I now use Ethereal to create the test file (from the command prompt), easier nd with more options.

Check out the info on my site and let me know how it goes.

Regards 'Making things work better; bit by bit.'

 

[olddataguy]

Go to ethereal.com
They have a decoder as well as the format for .cap

 

[Guest_imported]

Do anyone now where I can download a demo version of Sniffer Pro 4.7 ???

Thanx, CJ