Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Sniffer .enc file format

Posted on 2004-08-04
4
Medium Priority
?
1,646 Views
Last Modified: 2008-02-01
Hi all,

I've been given the task of writing a sniffer-like tool that, among other things, saves files in the .enc etherpeek compatible file format.  Firstly though, I need to determine whether the customised information I'll be grabbing off the network has everything I require to actually produce a proper .enc file before I go and code it.  I found this link: http://www.networkuptime.com/tips/file_formats/ which says "original Ethernet trace file format is detailed in the Sniffer documentation" but the link to that file is dead.  Does anyone know where I can find this info or at least give a quick breakdown of the file structure?  My Google searches so far have been less than fruitful :-(

Thanks,
daecks
0
Comment
Question by:daecks
  • 3
4 Comments
 
LVL 1

Expert Comment

by:tropsmr2
ID: 11719928
Possibly you might take a look at the Ethereal source code.  It is a free sniffer that can write outputs in many formats, including .enc.

http://www.ethereal.com/development.html

PS:  Why write the program when you could employ Ethereal for nothing?
0
 
LVL 1

Accepted Solution

by:
tropsmr2 earned 375 total points
ID: 11720019
0
 

Author Comment

by:daecks
ID: 11728308
Thanks for your help tropsmr2

Also, found a working link to the document in the source code: http://www.nai.com/common/media/sniffer/support/sdos/operation.pdf

cheers,
daecks
0
 
LVL 1

Expert Comment

by:tropsmr2
ID: 11729147
Glad to hear that you're on your way!  Cheers and best of luck with your project...troy
0

Featured Post

Become an Android App Developer

Ready to kick start your career in 2018? Learn how to build an Android app in January’s Course of the Month and open the door to new opportunities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This program is used to assist in finding and resolving common problems with wireless connections.
Tech spooks aren't just for those who are tech savvy, it also happens to those of us running a business. Check out the top tech spooks for business owners.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question