On Jun 3, 2013, at 10:58 AM, Michael Richardson <m...@sandelman.ca> wrote:

> Correct me if I'm wrong, but we have magic number differences when the
> save file contents are different?

Yes.  0xa1b2c3d4 for standard, 0xa1b23c4d for "same format except that the time 
stamps are in seconds and nanoseconds"; see libpcap/sf-pcap.c.

_______________________________________________
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Reply via email to