[Guy Harris <guy@xxxxxxxxxxxx>]

On Friday, August 22, 2003, at 3:56 AM, Tim Everitt wrote:

> The file and packets headers are clear but the body of the packets is a
> puzzle as savefile.c is very clear that "Note that the packets are 
> always
> written in network byte order".

Actually, as of about a minute ago, the current CVS version of 
savefile.c says

 * Note that the bytes of packet data are written out in the order in
 * which they were received, so multi-byte fields in packets are not
 * written in host byte order, they're written in whatever order the
 * sending machine put them in.

because I just checked that into the libpcap CVS tree - that's a more 
correct explanation.