Re: Pcap filters for saved capture files?

["Nick Chorley" <nick.chorley () gmail com>]

Hi,

I'm using libpcap in programs I'm writing and I already have saved capture
files. I've seen many examples of using pcap_compile() and pcap_setfilter()
for capturing live packets, but none for use with offline files. The last
argument to pcap_compile() seems to be an IP address, but obviously if
you're opening a file, there's no device and hence no address.

Regards,

Nicky Chorley
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.