Reverse engineering and documenting the ".tdc" capture file format used by Total Phase Data Center (TPDC) / Beagle USB analyzers.
https://github.com/cyrozap/tools-for-tdc.git
This project is an effort to reverse engineer and document the .tdc capture file format used by Total Phase Data Center.
Total Phase Data Center (TPDC) is proprietary software needed to use Total Phase's protocol analyzer products, including their Beagle USB 5000 SuperSpeed Protocol Analyzer.
The goal of this project is to understand enough of the .tdc capture file format to write a tool to be able to convert them to PCAP-NG format, to enable users of Beagle USB protocol analyzers to take advantage of Wireshark's wide array of protocol dissectors and plugin ecosystem.
This project was started in large part because Total Phase has a webpage that "explains" how to export USB captures to PCAP, but their "explanation" leaves the writing of the code to do the conversion as an exercise to the reader.
This project is not affiliated with, sponsored by, endorsed by, or in any way associated with Total Phase, Inc., the developer of Total Phase Data Center and associated protocol analyzer products. This project makes no claim to ownership of the proprietary rights (including patents, trademarks, copyrights, trade secrets, etc.) of Total Phase, Inc. and its products or software.
Done:
.tdc files is partially understood and documented with Kaitai Struct in doc/tdc.ksy..tdc files is (nearly) completely understood, and can be correctly decompressed using the algorithm described in doc/Compression.md. The algorithm is FastLZ..tdc file and generate a .pcapng file from it.Except where stated otherwise: