Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] Parsing a PCAP file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 15 Oct 2005 10:37:14 -0700
Ulf Lamping wrote:

See also: http://wiki.ethereal.com/Development/LibpcapFileFormat

...and note that it's probably easier, in most cases, to use libpcap/WinPcap to read the file than to write your own code to read the file - and that using libpcap/WinPcap means your program will be able to read many pcap-NG files once the new pcap format is implemented. (The Wiki page in question notes that.)