tcpdump mailing list archives

Re: libpcap usage while reading pcapNG files


From: Guy Harris <gharris () sonic net>
Date: Thu, 13 Sep 2018 14:07:01 -0700

On Sep 13, 2018, at 1:49 PM, Madhav Ancha <mancha () tower-research com> wrote:

  Is there a way to get the "options" along with the "packet data "in an
Enhanced Packet Block when reading the pcapNG files please?

No.  There are no provisions in the current pcap API to provide that information, as the API was designed when pcap 
format was the only format.

Providing full support for pcapng would require a new API (which should be able to support pcap files as well).
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Current thread: