wireshark/wiretap
Guy Harris c1082bd99e wiretap: have the "for each option" routine return a success/fail indication.
Have the routine it calls return a Boolean value, with "true" meaning
"keep going" and "false" meaning "stop iterating and return a failure
indication".  If the callback routine never returns "false", the routine
returns "true" as a success indication.
2021-06-27 13:25:16 -07:00
..
.editorconfig Miscellaneous EditorConfig fixes 2021-03-02 19:13:54 +00:00
5views.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
5views.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
CMakeLists.txt CMake: Add ENABLE_VLD option for MSVC 2021-04-10 21:53:59 +00:00
README HTTPS In Even More Places, update some links. 2019-07-28 04:21:18 +00:00
README.airmagnet Fix many spelling errors 2020-10-11 08:35:55 +00:00
README.developer Add a systemd Journal Export Format parser and dissector. 2018-08-31 05:20:27 +00:00
aethra.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
aethra.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
ascend-int.h wiretap: Convert ascend.y to Lemon. 2020-11-30 08:15:43 +00:00
ascend_parser.lemon Replace some lingering references to g_log() 2021-06-19 02:34:36 +00:00
ascend_scanner.l Cast away the return value of g_strlcpy() and g_strlcat(). 2021-04-30 03:19:19 -07:00
ascendtext.c ascend: set rec->rec_type. 2021-05-31 02:44:57 -07:00
ascendtext.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
atm.c HTTPS (almost) everywhere. 2019-07-26 18:44:40 +00:00
atm.h Generalize wtap_pkthdr into a structure for packet and non-packet records. 2018-02-09 00:29:51 +00:00
ber.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
ber.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
btsnoop.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
btsnoop.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
busmaster.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
busmaster.h wiretap: Add support for Busmaster log file format 2019-08-03 15:46:08 +00:00
busmaster_parser.lemon wiretap: Add support for Busmaster log file format 2019-08-03 15:46:08 +00:00
busmaster_priv.h Add ws_debug() and use it 2021-05-24 01:13:19 +00:00
busmaster_scanner.l wiretap: Add support for Busmaster log file format 2019-08-03 15:46:08 +00:00
camins.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
camins.h Fix some source headers, reformat SPDX license lines in comment block. 2018-02-18 22:50:37 +00:00
candump.c Add ws_debug() and use it 2021-05-24 01:13:19 +00:00
candump.h wiretap: Add support of candump logs 2019-07-11 04:44:00 +00:00
candump_parser.lemon "config.h" need not and should not be included in any header 2021-06-25 23:53:53 +01:00
candump_priv.h Add ws_debug() and use it 2021-05-24 01:13:19 +00:00
candump_scanner.l wiretap: candump: Don't generate a temporary PCAP file 2019-07-20 07:29:33 +00:00
capsa.c Replace g_assert() with ws_assert() in places 2021-06-06 20:05:26 +00:00
capsa.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
catapult_dct2000.c DT2000: Fix buffer length in wiretap code 2021-06-25 09:44:35 +01:00
catapult_dct2000.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
commview.c commview: add support for newer NCFX file format. 2021-05-11 07:40:51 +00:00
commview.h commview: add support for newer NCFX file format. 2021-05-11 07:40:51 +00:00
cosine.c Cast away the return value of g_strlcpy() and g_strlcat(). 2021-04-30 03:19:19 -07:00
cosine.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
csids.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
csids.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
daintree-sna.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
daintree-sna.h Fix comment end after SPDX identifier 2018-05-01 06:56:37 +00:00
dbs-etherwatch.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
dbs-etherwatch.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
dct3trace.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
dct3trace.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
dpa400.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
dpa400.h HTTPS (almost) everywhere. 2019-07-26 18:44:40 +00:00
erf-common.h erf: handle errors in some routines more completely. 2021-06-18 16:22:54 -07:00
erf.c wiretap: have the "for each option" routine return a success/fail indication. 2021-06-27 13:25:16 -07:00
erf.h wiretap: eliminate the pcap/nspcap/pcapng WTAP_FILE_TYPE_SUBTYPE_ values. 2021-02-23 21:56:20 +00:00
erf_record.h ERF: split wiretap/erf.h into three files. 2020-05-02 04:24:08 +00:00
eyesdn.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
eyesdn.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
file_access.c Replace g_log() calls with ws_log() 2021-06-16 12:50:27 +00:00
file_wrappers.c Replace g_assert() with ws_assert() in places 2021-06-06 20:05:26 +00:00
file_wrappers.h wiretap: Add a file_gets variant that returns a pointer to the NUL terminator 2018-05-07 06:44:24 +00:00
hcidump.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
hcidump.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
i4b_trace.h Strengthen the I4B heuristics. 2019-09-02 21:40:09 +00:00
i4btrace.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
i4btrace.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
ipfix.c Refactor our logging and extend the wslog API 2021-06-11 09:40:28 +00:00
ipfix.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
iptrace.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
iptrace.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
iseries.c Replace g_assert() with ws_assert() in places 2021-06-06 20:05:26 +00:00
iseries.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
json.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
json.h HTTPS (almost) everywhere. 2019-07-26 18:44:40 +00:00
k12.c Wiretap: Fix a resource leak 2021-06-09 17:09:44 +00:00
k12.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
k12text.l wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
lanalyzer.c Replace g_log() calls with ws_log() 2021-06-16 12:50:27 +00:00
lanalyzer.h wiretap: eliminate the pcap/nspcap/pcapng WTAP_FILE_TYPE_SUBTYPE_ values. 2021-02-23 21:56:20 +00:00
libpcap.c erf: handle errors in some routines more completely. 2021-06-18 16:22:54 -07:00
libpcap.h wiretap: eliminate the pcap/nspcap/pcapng WTAP_FILE_TYPE_SUBTYPE_ values. 2021-02-23 21:56:20 +00:00
log3gpp.c Replace g_log() calls with ws_log() 2021-06-16 12:50:27 +00:00
log3gpp.h wiretap: Add a phone log reader. 2019-07-08 11:41:05 +00:00
logcat.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
logcat.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
logcat_text.c Cast away the return value of g_strlcpy() and g_strlcat(). 2021-04-30 03:19:19 -07:00
logcat_text.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
merge.c Refactor our logging and extend the wslog API 2021-06-11 09:40:28 +00:00
merge.h Have wtap_read() fill in a wtap_rec and Buffer. 2019-04-05 02:49:43 +00:00
mime_file.c TIFF: Add a basic TIFF dissector 2021-04-24 10:42:59 +00:00
mime_file.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
mp2t.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
mp2t.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
mp4.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
mp4.h wiretap: Add MP4 reader 2020-01-14 20:04:01 +00:00
mpeg.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
mpeg.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
mplog.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
mplog.h Fix some source headers, reformat SPDX license lines in comment block. 2018-02-18 22:50:37 +00:00
netmon.c netmon: fill in all of the 802.11 pseudo-header in the dissector. 2021-04-02 07:46:32 +00:00
netmon.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
netscaler.c Replace g_assert() with ws_assert() in places 2021-06-06 20:05:26 +00:00
netscaler.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
netscreen.c Cast away the return value of g_strlcpy() and g_strlcat(). 2021-04-30 03:19:19 -07:00
netscreen.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
nettl.c Cast away the return value of g_strlcpy() and g_strlcat(). 2021-04-30 03:19:19 -07:00
nettl.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
nettrace_3gpp_32_423.c Replace g_assert() with ws_assert() in places 2021-06-06 20:05:26 +00:00
nettrace_3gpp_32_423.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
netxray.c Wiretap: Fix some compiler warnings. 2021-04-16 20:09:42 +00:00
netxray.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
ngsniffer.c Replace g_assert() with ws_assert() in places 2021-06-06 20:05:26 +00:00
ngsniffer.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
observer.c Cast away the return value of g_strlcpy() and g_strlcat(). 2021-04-30 03:19:19 -07:00
observer.h observer: rename source and update name. 2021-03-11 16:01:27 -08:00
packetlogger.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
packetlogger.h Fix comment end after SPDX identifier 2018-05-01 06:56:37 +00:00
pcap-common.c pcap-common: set the time stamp precision correctly for LINKTYPE_ERF. 2021-06-18 17:43:36 -07:00
pcap-common.h wiretap: eliminate the pcap/nspcap/pcapng WTAP_FILE_TYPE_SUBTYPE_ values. 2021-02-23 21:56:20 +00:00
pcap-encap.h libwiretap: make wtap_wtap_encap_to_pcap_encap() private to the library. 2021-03-14 14:22:16 -07:00
pcapng.c wiretap: have the "for each option" routine return a success/fail indication. 2021-06-27 13:25:16 -07:00
pcapng.h wiretap: eliminate the pcap/nspcap/pcapng WTAP_FILE_TYPE_SUBTYPE_ values. 2021-02-23 21:56:20 +00:00
pcapng_module.h Make various names match the name of the systemd journal export block. 2021-06-17 13:52:45 -07:00
peekclassic.c Replace g_assert() with ws_assert() in places 2021-06-06 20:05:26 +00:00
peekclassic.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
peektagged.c radiotap, wlancap, wiretap: make the "phy" reflect the packet modulation. 2021-03-08 18:40:32 -08:00
peektagged.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
pppdump.c Replace g_assert() with ws_assert() in places 2021-06-06 20:05:26 +00:00
pppdump.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
radcom.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
radcom.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
required_file_handlers.h wiretap: eliminate the pcap/nspcap/pcapng WTAP_FILE_TYPE_SUBTYPE_ values. 2021-02-23 21:56:20 +00:00
rfc7468.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
rfc7468.h HTTPS (almost) everywhere. 2019-07-26 18:44:40 +00:00
ruby_marshal.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
ruby_marshal.h HTTPS (almost) everywhere. 2019-07-26 18:44:40 +00:00
secrets-types.h Add support for embedding WireGuard keys in a pcapng file 2019-06-17 00:48:29 +00:00
snoop.c wsutil: add a header that defines some "round to power of 2" macros. 2021-06-16 02:01:23 -07:00
snoop.h wiretap: eliminate the pcap/nspcap/pcapng WTAP_FILE_TYPE_SUBTYPE_ values. 2021-02-23 21:56:20 +00:00
socketcan.h wiretap: Add support for Busmaster log file format 2019-08-03 15:46:08 +00:00
stanag4607.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
stanag4607.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
systemd_journal.c Make various names match the name of the systemd journal export block. 2021-06-17 13:52:45 -07:00
systemd_journal.h Add a systemd Journal Export Format parser and dissector. 2018-08-31 05:20:27 +00:00
tnef.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
tnef.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
toshiba.c wiretap: rename wtap_register_file_type_subtypes(). 2021-02-23 20:39:16 -08:00
toshiba.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
visual.c Cast away the return value of g_strlcpy() and g_strlcat(). 2021-04-30 03:19:19 -07:00
visual.h wiretap: register most built-in file types from its module. 2021-02-14 00:58:46 -08:00
vms.c Cast away the return value of g_strlcpy() and g_strlcat(). 2021-04-30 03:19:19 -07:00
vms.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
vwr.c Replace g_assert() with ws_assert() in places 2021-06-06 20:05:26 +00:00
vwr.h replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. 2018-02-08 14:57:36 +00:00
wtap-int.h wiretap: un-export some routines. 2021-05-31 04:39:59 -07:00
wtap.c pcapng: add support for custom options 2021-06-23 04:38:27 +00:00
wtap.h pcapng: add support for custom options 2021-06-23 04:38:27 +00:00
wtap_modules.h Move even more headers outside extern "C". 2021-03-16 04:33:00 -07:00
wtap_opttypes.c wiretap: have the "for each option" routine return a success/fail indication. 2021-06-27 13:25:16 -07:00
wtap_opttypes.h wiretap: have the "for each option" routine return a success/fail indication. 2021-06-27 13:25:16 -07:00

README

NOTE: this documents the original intent behind libwiretap.  Currently,
it is being developed solely as a library for reading capture files,
rather than packet capture.  The list of file formats is also
out-of-date.

Wiretap is a library that is being developed as a future replacement for
libpcap, the current standard Unix library for packet capturing. Libpcap
is great in that it is very platform independent and has a wonderful
BPF optimizing engine. But it has some shortcomings as well. These
shortcomings came to a head during the development of Wireshark
(https://www.wireshark.org/), a packet analyzer. As such, I began developing
wiretap so that:

1. The library can easily be amended with new packet filtering objects.
Libpcap is very TCP/IP-oriented. I want to filter on IPX objects, SNA objects,
etc. I also want any decent programmer to be able to add new filters to the
library.

2. The library can read file formats from many packet-capturing utilities.
Libpcap only reads Libpcap files.

3. The library can capture on more than one network interface at a time, and
save this trace in one file.

4. Network names can be resolved immediately after a trace and saved in the
trace file. That way, I can ship a trace of my firewall-protected network to a
colleague, and he'll see the proper hostnames for the IP addresses in the
packet capture, even though he doesn't have access to the DNS server behind my
LAN's firewall.

5. I want to look into the possibility of compressing packet data when saved
to a file, like Sniffer.

6. The packet-filter can be optimized for the host OS. Not all OSes have BPF;
SunOS has NIT and Solaris has DLPI, which both use the CMU/Stanford
packet-filter pseudomachine. RMON has another type of packet-filter syntax
which we could support.

Wiretap is very good at reading many file formats, as per #2
above. Wiretap has no filter capability at present; it currently doesn't
support packet capture, so it wouldn't be useful there, and filtering
when reading a capture file is done by Wireshark, using a more powerful
filtering mechanism than that provided by BPF.


File Formats
============

Libpcap
-------
The "libpcap" file format was determined by reading the "libpcap" code;
wiretap reads the "libpcap" file format with its own code, rather than
using the "libpcap" library's code to read it.

Sniffer (compressed and uncompressed)
-------
The uncompressed Sniffer format is documented in the Sniffer manual.
Unfortunately, Sniffer manuals tend to document only the format for
the Sniffer model they document. Token-Ring and ethernet seems to work
well, though.  If you have an ATM Sniffer file, both Guy and Gilbert
would be *very* interested in receiving a sample. (see 'AUTHORS' file
for our e-mail addresses).

LANalyzer
---------
The LANalyzer format is available from http://www.novell.com. Search
their knowledge base for "Trace File Format".

Network Monitor
---------------
Microsoft's Network Monitor file format is supported, at least under
Ethernet and token-ring. If you have capture files of other datalink
types, please send them to Guy.

"snoop"
-------
The Solaris 2.x "snoop" program's format is documented in RFC 1761.

"iptrace"
---------
This is the capture program that comes with AIX 3.x and 4.x.  AIX 3 uses
the iptrace 1.0 file format, while AIX4 uses iptrace 2.0.  iptrace has
an undocumented, yet very simple, file format.  The interesting thing
about iptrace is that it will record packets coming in from all network
interfaces; a single iptrace file can contain multiple datalink types.

Sniffer Basic (NetXRay)/Windows Sniffer Pro
-------------------------------------------
Network Associates' Sniffer Basic (formerly NetXRay from Cinco Networks)
file format is now supported, at least for Ethernet and token-ring. 
Network Associates' Windows Sniffer Pro appears to use a variant of that
format; it's supported to the same extent.

RADCOM WAN/LAN Analyzers
------------------------
Olivier Abad has added code to read Ethernet and LAPB captures from
RADCOM WAN/LAN Analyzers (see https://web.archive.org/web/20031231213434/http://www.radcom-inc.com/).

Lucent/Ascend access products
-----------------------------
Gerald

HP-UX nettl
-----------
nettl is used on HP-UX to trace various streams based subsystems.  Wiretap
can read nettl files containing IP frames (NS_LS_IP subsystem) and LAPB
frames (SX25L2 subsystem). It has been tested with files generated on
HP-UX 9.04 and 10.20.
Use the following commands to generate a trace :
# IP capture. 0x30000000 means PDU in and PDU out :
nettl -tn 0x30000000 -e NS_LS_IP -f tracefile
# X25 capture. You must specify an interface :
nettl -tn 0x30000000 -e SX25l2 -d /dev/x25_0 -f tracefile
# stop capture. subsystem is NS_LS_IP or SX25L2 :
nettl -tf -e subsystem

One may be able to specify "-tn pduin pduout" rather than
"-tn 0x30000000"; the nettl man page for HP-UX 10.30 implies that it
should work.

There is also basic support for nettl files containing NS_LS_DRIVER, 
NS_LS_TCP, NS_LS_UDP, NS_LS_LOOPBACK, unknown type 0xb9, and NS_LS_ICMP.
However, NS_LS_ICMP will not be decoded since WTAP lacks a raw ICMP 
encapsulation type.


Toshiba ISDN Router
-------------------
An under-documented command that the router supports in a telnet session
is "snoop" (not related to the Solaris "snoop" command). If you give
it the "dump" option (either by letting "snoop" query you for its next
argument, or typing "snoop dump" on the command line), you'll get a hex
dump of all packets across the router (except of your own telnet session
-- good thinking Toshiba!). You can select a certain channel to sniff
(LAN, B1, B2, D), but the default is all channels.  You save this hex
dump to disk with 'script' or by 'telnet | tee'. Wiretap will read the
ASCII hex dump and convert it to binary data.

ISDN4BSD "i4btrace" utility
---------------------------
Bert Driehuis

Cisco Secure Intrusion Detection System iplogging facility
-----------------------------------------------------------
Mike Hall

pppd logs (pppdump-format files)
--------------------------------
Gilbert

VMS TCPTRACE
------------
Compaq VMS's TCPIPTRACE format is supported.  This is the capture program
that comes with TCP/IP or UCX as supplied by Compaq or Digital Equipment
Corporation.

Under UCX 4.x, it is invoked as TCPIPTRACE.  Under TCPIP 5.x, it is invoked
as TCPTRACE.

TCPTRACE produces an ascii text based format, that has changed slightly over
time.

DBS Etherwatch (text format)
----------------------------
Text output from DBS Etherwatch is supported.  DBS Etherwatch is available
from: https://web.archive.org/web/20070612033348/http://www.users.bigpond.com/dbsneddon/software.htm.

Catapult DCT2000 (.out files)
-----------------------------
DCT2000 test systems produce ascii text-based .out files for ports
that have logging enabled. When being read, the data part of the message is
prefixed with a short header that provides some context (context+port,
direction, original timestamp, etc).

You can choose to suppress the reading of non-standard protocols
(i.e. messages between layers rather than the well-known link-level protocols
usually found on board ports).


Gilbert Ramirez <gram@alumni.rice.edu>
Guy Harris <guy@alum.mit.edu>

STANAG 4607
-----------
Initial support for the STANAG 4607 protocol.  Documentation at:
https://web.archive.org/web/20130223054955/http://www.nato.int/structur/AC/224/standard/4607/4607.htm