Sniffer raw decode file format

[jdavis1]

Where is the capture file format (.cap) documented? Since there doesn't seem to be a good solution for decoding TNS/SQL frames on non-standard ports, I want to alter the TCP port numbers in the raw capture file to force the sniffer to decode these packets.

Network Associates/General: A nice enhancement would be to have the decoder recognize the TNS redirect packets and decode the SQL frames accordingly.