On Jan 27, 2012, at 2:34 AM, Boaz Brickner wrote:

> In Pcap.Net (http://pcapdot.net), I'm using pcap_fopen_offline() to open 
> files.
> Since this function assumes the FILE* argument it gets is already open, does 
> calling pcap_close() on its output also closes that FILE*

Yes, it does.

And, yes, this does, I think, run the risk that you'll open the FILE * with one 
version of the C runtime library and have WinPcap close it with another 
version, which I am told

        1) can happen

and

        2) can cause crashes and other problems.

(I come from the UN*X world, where that sort of 
mismatched-versions-of-the-C-library problem simply doesn't happen.  You can 
allocate stuff in a library and free it in the main program or another library, 
and open a FILE * in the main program and close it in a library or open it in a 
library and close it in the main program or another library, and all the 
operations will be done by the same version of the C library.)

If this is causing problems, you might want to see whether you can use 
pcap_hopen_offline() with a HANDLE instead.
_______________________________________________
Winpcap-users mailing list
[email protected]
https://www.winpcap.org/mailman/listinfo/winpcap-users

Reply via email to