<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"></head>
<body>
<!--SOHUMAIL_HTML_HEAD_END--><p> Could some one please give me some advice about handling the tcp dump files? I'm working on an analysis of the network traffic. However, under the Windows environment, I can not find any useful tool to visualize or handle the dump files conveniently.<p> Tcptrace i known is a common tool to analyze network traffic and take as input dump files. Unfortunately, it is seem that what tcptrace does is very different from what i want.<p> <p> Could somebody help me ,the information related to the follow topic are valuable for me:<p> <p> first, how can i to display the dump file in an understandable style, or to transform the binary format of original dump file to a more friend format, such as the text format etc. (note: under Windows OS)<p><p> second, the output format of dump file still confused me. Do all records in the files have the same size in bytes? if so, what is the number of bytes? <p> In addition, I want to read a record each time, but how to judge the end of a record if the lengths of records of different protocols (e.g. tcp, udp) are variable ? <p> <p> Thanks very much !!<p> Shaohe lv <p> Mar. 02 2006<hr size=1><style type="text/css">
<!--
a {font-size:12px;color:black}
a:hover {font-size:12px;text-decoration:underline}
.b{font-family:Arial; font-size:80%; margin-bottom:2px;color:#0000CC}
.pp{font-family:Arial;font-size:10px}
-->
</style>
<table border=0>
<!--tr><td height=18><a href=http://goto.sohu.com/goto.php3?code=mailadt-ta1 target=_blank>??????????????</a>
<br>
</td></tr-->
<tr><td height=18><a href=http://goto.sohu.com/goto.php3?code=mailadt-ta1 target=_blank><font color=red>??1G??U??????U?U??</font></a>
</td></tr>
<br>
<tr><td height=18><a href=http://goto.sohu.com/goto.php3?code=mailadt-ta target=_blank>????VIP???????</a>
</td></tr>
</table><!--SOHUMAIL_HTML_TAIL_END--></body>
</html>