Re: Question about savefile format

[Guy Harris <guy () alum mit edu>]

On Apr 1, 2008, at 2:03 AM, Milosz Marian Hulboj wrote:

> I would like to know whether it is possible with the current pcap  
> format to
> store the captured packets in the fixed length blocks in the file.

What "fixed length blocks" are you referring to?  The current file  
format has

        1) a file header, which you can't use to store packets;

        2) variable-length blocks containing packets.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.