in reply to
Re: parsing pcap-ng files
in thread
parsing pcap-ng files
You can also try to convert the pcap-ng file to libpcap format at http://pcapng.com/
Comment on
Re^2: parsing pcap-ng files
Replies are listed 'Best First'.
Re^3: parsing pcap-ng files
by
harryd100
(Initiate)
on Feb 15, 2013 at 18:53 UTC
Just convert it: editcap -F libpcap <file.pcapng> <file.pcap>
[reply]
Re^4: parsing pcap-ng files
by
Anonymous Monk
on Mar 19, 2015 at 19:09 UTC
The problem is pcap supports only µs resolution... For those of us that need nanosecond time resolution pcap file format is totally unacceptable. I have pcaps with 3ns time resolution using hardware timestamping and a 350 MHz ocillator.
[reply]
In Section
Seekers of Perl Wisdom