["George P Nychis" <gnychis@xxxxxxx>]

Ok I guess i'm a little confused because I have .ISO files and such on my hard drive that are like 5GB, so why is my OS allowing those large files and not large pcap files?

Just a little confused :\

- George


> On 3/14/06, George P Nychis <gnychis@xxxxxxx> wrote:
>> Hi,
>> 
>> I was wondering if there is any way to exceed the libpcap file size
>> limit?  Why is there a limit btw?
> 
> Pcap itself has no size limit, there's a 64K per packet limit but no limit
> in the number of packets in the file.
> 
> The limit AFAIK is in the OS file_seek functions that may not allow to 
> access files bigger than a certain size (2GB), that's an OS limit 
> inherited by programs that run onm a certain platform.
> 
> ANSI C's fseek() uses a long for offset... so if you use fseek to navigate
> a the file you'll be able to index to at most the maximum value a long can
> take on a given platform.
> 
> wiretap uses long as well as index so the maximum size a seekable file can
> have is what you can express with a long on a given system.
> 
> L. -- This information is top security. When you have read it, destroy
> yourself. -- Marshall McLuhan 
> _______________________________________________ Ethereal-users mailing
> list Ethereal-users@xxxxxxxxxxxx 
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 
> 


--