Hi, Included a patch (I'm not used to git) to return a packet header suited for writing pacp-ng files only pcap_dispatch_ng() has been added so far. The patch is only compile tested. But I'd be grateful for some feedback if this approach is acceptable and if it's worth my while to continue work on it or any other suggestion on how to proceed. If someone wants to improve on the patch even better.
Best regards Anders Broman
_______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
