On Wed, Jan 03, 2007 at 03:25:43PM +0800, joyce wrote: > Thanks for your reply. What the "libpcap-format file header" looks > like? See here: http://wiki.wireshark.org/Development/LibpcapFileFormat Steve