Wesley, it seems like a good idea. I can't look at your patch from the cottage, since I squirt out bits only once a day by walking down the road to where there is some wifi.
Since pcap files have no end of file marker, and each file has a header on it, do you look at the beginning of each packet, and see if there is a pcap magic number? (pcap-ng doesn't have this problem, and I appologize to the pcap-ng folks for how long it's taken to move towards it) -- Michael Richardson -at the cottage-
pgppR8HF1tLLx.pgp
Description: PGP signature
_______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers