Ethereal-users: Re: [Ethereal-users] handling saved files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 13 Oct 2005 00:27:51 -0700
Servando Garcia wrote:

Using pcap how would I handle saved files.
I know I have to use pcap_open_offline but then what. I am thinking I need to use pcap_loop but I am not sure.
Using pcap_loop is probably the simplest way of doing it. See, for example, the source to tcpdump.
The hard part is analyzing the packet contents; libpcap won't help you there.