It works, but I think args 2 and 3 (of 4) to fread are swapped.
Unless it forces the kernel to read a character at a time?
Line 1048: amt_read = fread((char *)&hdr, 1, sizeof(hdr), fp);
FREAD(3):
size_t fread(void *ptr, size_t size, size_t nmemb, FILE *stream);
..., s
The draft describes two different blocks for holding a captured packet:
Packet Block: it contains a single captured packet, or a portion of it.
Simple Packet Block: it contains a single captured packet, or a
portion of it, with only a minimal set of information about it.
I often work with very
Hi all.
This mail is to announce the birth of the NTAR project. NTAR stands for
Network Trace Archival and Retrieval library, and is an implementation of
the PCAP next generation dump file format, that was proposed and discussed
last year by several folks on the libpcap/tcpdump and WinPcap mailin
