Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Appending to the dump file

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 12 Jan 2007 18:44:06 -0800

On Jan 12, 2007, at 2:40 PM, Stephen Fisher wrote:

On Fri, Jan 12, 2007 at 04:23:25PM -0600, Andrew Chalk wrote:
Every time I open a dump file with
<file:///D:\WORK\WinPcap\v3.1B4\WpdPack\docs\html \group__wpcapfunc.html#ga19
pcap_dump_open()

What is your question?

It's a question relevant to libpcap/WinPcap, and also asked on the WinPcap-users mailing list ("Whenever I open a dump file with pcap_dump_open() it deletes an existing file with the same name and creates a new one. Is there any way to get it to append to the existing file?") - except that the complete question appeared there (and without the two corporate logos). Perhaps he decided to ask on the WinPcap-users mailing list instead, but sent the mail to the Wireshark-users list rather than cancelling the message for that list? (I've sent messages accidentally in the past, so it's conceivable to me that the same thing happened here.)