[tcpdump-workers] deduct local IP address from cap-file

Hi, Is it by any means possible to deduct the local IP address from a cap-file? With local I mean the IP address that is physically bound to the machine where tcpdump is ran. Thank you, Andrej - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] deduct local IP address from cap-file

On Apr 30, 2010, at 12:14 AM, Andrej van der Zee wrote: Is it by any means possible to deduct the local IP address from a cap-file? With local I mean the IP address that is physically bound to the machine where tcpdump is ran. If you mean deduce - i.e., given a capture file, determine what

[tcpdump-workers] estimate #packets in pcap file

Hi, I am looking for way to estimate the number of packages in a pcap file without traversing throu all packages with pcap_loop(). It does noet have to be precise, just an estimate. Is there a way? Thank you, Andrej - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to