Re: [tcpdump-workers] Multifile patch

2012-08-23 Thread Michael Richardson
> "Wesley" == Wesley Shields writes: >> Since pcap files have no end of file marker, and each file >> has a header on it, do you look at the beginning of each packet, and see >> if there is a pcap magic number? Wesley> I'm not sure I'm parsing this right but... Wesley> I

Re: [tcpdump-workers] Multifile patch

2012-08-23 Thread Wesley Shields
On Thu, Aug 23, 2012 at 01:27:33PM -0400, Michael Richardson wrote: > > > "Wesley" == Wesley Shields writes: > >> Since pcap files have no end of file marker, and each file > >> has a header on it, do you look at the beginning of each packet, and > see > >> if there is a pcap mag