[tcpdump-workers] Saving packets with libpcap in PCAPNG format

I am working on an application that requires to store packets in PCAPNG format. My understanding is that there isn't support for saving packets in PCAPNG format in the current code base. I have noticed that Apple has created an API in its custom version of libpcap (latest version can be viewed at h

Re: [tcpdump-workers] Saving packets with libpcap in PCAPNG format

: > On Dec 6, 2016, at 10:15 AM, Martin Dubuc wrote: > > > I am working on an application that requires to store packets in PCAPNG > > format. My understanding is that there isn't support for saving packets > in > > PCAPNG format in the current code base. I have no

[tcpdump-workers] PCAPNG

I am working on an application that requires to store packets in PCAPNG format. My understanding is that there isn't support for saving packets in PCAPNG format in the current code base. I have noticed that Apple has created an API in its custom version of libpcap (latest version can be viewed at h

[tcpdump-workers] pcap_offline_read return value

I was testing some of the libpcap API and would like to get some clarification on the return value of one of the function. Is pcap_dispatch supposed to return the number of packets read/processed? In my sample code, it always return 0. I tried to trace the code execution and found out that pcap_off