Subject: snoop vs. tcpdump
To: None <tech-net@netbsd.org>
From: Andrew Brown <atatat@atatdot.net>
List: tech-net
Date: 10/04/1999 23:38:47
i don't like snoop (you can't get it to *not* look up hostnames) but
that's probably affected by the fact that i don't like solaris much
(but that's a differnet rant :).  anyways...i have a need to move some
packet capture files from a solaris box to somewhere i can manipulate
them more easily.  so i was gonna write a little program to convert
between the two formats.  it seems easy enough (i figured out the file
formats from inspection after about 20 minutes), but i was
wondering...

 * is this something that's already been done?  if so, where is it?
 * what other packet capture file formats are there that i might like
   to support?
 * can you think of any other silly ideas for me?

comments?  help?

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
andrew@crossbar.com       * "information is power -- share the wealth."