The output from VMS's TCPIPtrace/TCPtrace/UCX$TRACE utilities The output in IPLog format from the Cisco Secure Intrusion Detection System

The output from i4btrace from the ISDN4BSD project Network Instruments Observer version 9 captures Network General/Network Associates DOS-based Sniffer (compressed or uncompressed) capturesĪG Group/WildPackets/Savvius EtherPeek/TokenPeek/AiroPeek/EtherHelp/PacketGrabber captures Network Associates Windows-based Sniffer captures libpcap captures (Wireshark native readable and writable by Libpcap and thus by TcpDump and other tools that use it) PcapNg captures (Wireshark native readable by Libpcap 1.1.0 and later and thus by TcpDump and other tools that use it) This is the reason why support of these file types might be incomplete and inaccurate at some parts. Other formats are added to Wireshark by reverse engineering, so the support of these formats is done through 'sophisticated guesswork'. Some of these formats are well-documented and therefore well-known, such as the PcapNg and Libpcap formats. Wireshark supports a variety of capture file formats.

Tcpdump wireshark pcap format