I have a capture file that was e-gressed from an Apcon smart-tap but when I view the trace file in Wireshark v 1.10.5, it shows the header as "VSS-Monitoring ethernet trailer'. Does Wireshark support Apcon timestamp yet? Or is that in same format as VSS-Monitoring? asked 04 Mar '14, 16:43 techynewbie |
One Answer:
"VSS-Monitoring" refers to devices from VSS Monitoring (who are owned by a conglomerate named Danaher). APCON are a separate company, so, unless either they copied VSS Monitoring, VSS Monitoring copied them, they both copied somebody else, or they coincidentally invented the same trailer format, the APCON trailer isn't the same as the VSS Monitoring trailer. We don't have any support for APCON trailers. Somebody would have to develop it and contribute it. APCON's Web site doesn't have any obvious documentation for it, so somebody would either have to find documentation for their trailer format or reverse-engineer it. answered 04 Mar '14, 17:48 Guy Harris ♦♦ |