On Jun 3, 2013, at 10:58 AM, Michael Richardson <m...@sandelman.ca> wrote:
> Correct me if I'm wrong, but we have magic number differences when the > save file contents are different? Yes. 0xa1b2c3d4 for standard, 0xa1b23c4d for "same format except that the time stamps are in seconds and nanoseconds"; see libpcap/sf-pcap.c. _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers