Re: [tcpdump-workers] rewind a capture file

On Jun 27, 2012, at 12:24 AM, ri...@happyleptic.org wrote: > I'd like to be able to read a pcap in a loop. > > There are two options I know of: > > - either close the pcap_handle when the pcap_dispatch/pcap_next function > returns the error-code for signaling end of file, and reopen it. > > -

[tcpdump-workers] rewind a capture file

I'd like to be able to read a pcap in a loop. There are two options I know of: - either close the pcap_handle when the pcap_dispatch/pcap_next function returns the error-code for signaling end of file, and reopen it. - or retrieve the pcap FILE* with pcap_file(), and rewind by hand (ie. seek