Re: [tcpdump-workers] Question about savefile format

[Guy Harris]

On Apr 1, 2008, at 2:03 AM, Milosz Marian Hulboj wrote:
I would like to know whether it is possible with the current pcap  
format to
store the captured packets in the fixed length blocks in the file.

What "fixed length blocks" are you referring to?  The current file  
format has

        1) a file header, which you can't use to store packets;

        2) variable-length blocks containing packets.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.