Re: PCAP file questions...

[Michael Richardson <mcr () sandelman ca>]

> > > > > "Guy" == Guy Harris <guy () alum mit edu> writes:
    Guy> A pcap file has *one* file header followed by a sequence of
    Guy> zero or more packets, each with a packet record header.  A file
    Guy> header is not a valid packet record header, so that wouldn't
    Guy> work for *any* number of packets.

    Guy> As per my mail, what's needed is a routine that doesn't write
    Guy> the file header.

PS: this property (one file header at the beginning), we consider a bug,
    and pcap-ng awaits integration... "send code"

-- 
Michael Richardson
-on the road-
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers