Ethereal-dev: [ethereal-dev] How to tell original PCAP capture file from Alexey's modified one

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Richard Sharpe <sharpe@xxxxxxxxxx>
Date: Thu, 25 Nov 1999 03:54:00 +1000
Hi,

I have just noticed that there appears to be two types of pcap capture
formats, with different headers. 

How can I tell if a normal pcap_hdr is being used, or a pcap_modified_hdr?



Regards
-------
Richard Sharpe, sharpe@xxxxxxxxxx, Master Linux Administrator :-),
Samba (Team member, www.samba.org), Ethereal (Team member, www.zing.org)
Co-author, SAMS Teach Yourself Samba in 24 Hours
Author: First Australian 5-day, intensive, hands-on Linux SysAdmin course