Revision 1 as of 2005-11-06 12:06:37
"file format" seems to fit better
|Deletions are marked like this.||Additions are marked like this.|
|Line 1:||Line 1:|
|## page was renamed from FileTypeReference/libpcap|
libpcap file format (.pcap)
The libpcap file format is used by a wide range of open (and closed) source programs.
The current libpcap file format version 2.4 is available for quite a long time now.
Programs supporting this file type
- Ethereal (Tethereal, ...)
- ... and a lot more
The common timestamp resolution is 1 us. A special libpcap format is available by Ethereal only, providing 1 ns timestamp resolution.
The libpcap support is fully functional. Ethereal supports reading and writing of this format.
Example capture file
XXX - Add a simple example capture file to the SampleCaptures page and link from here (see below). Keep this file short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.
- ["Development/LibpcapFileFormat"] libpcap file format details.