tcpdump mailing list archives

Re: How to read a big pcap file?

From: Guy Harris <guy () alum mit edu>
Date: Wed, 20 Oct 2010 03:12:50 -0700


On Oct 20, 2010, at 2:01 AM, Subhasis Mohapatra (submohap) wrote:

Thanks for the information,
I was using an older version of libpcap.

My pcap file is greater then 4GB and in Linux platform.


Then you'll probably need libpcap 1.0.0 or later.

It was giving an error like "Unable to read the pcap file".


Was that the error your program was printing, or was that the error you got from libpcap?  That's not a libpcap error 
message.-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.

Current thread:

How to read a big pcap file? Subhasis Mohapatra (submohap) (Oct 19)
- Re: How to read a big pcap file? Ambika Tripathy (Oct 19)
- Re: How to read a big pcap file? Guy Harris (Oct 20)
  - Re: How to read a big pcap file? Subhasis Mohapatra (submohap) (Oct 20)
    - Re: How to read a big pcap file? Guy Harris (Oct 20)