This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

pcap vs pcap-ng

0

What is the difference between these two? Should I start using pcap-ng at this point?

asked 23 Jan '11, 06:08

EricKnaus's gravatar image

EricKnaus
46192026
accept rate: 0%


One Answer:

2

The file format pcap-ng extends the simple pcap format features with the options to store more capture related information, like extended time stamp precision, capture interface information, capture statistics, mixed link layer types, name resolution information, user comments, etc. See the wiki page for more file format information.

Currently there's limited support for pcap-ng, still considered experimental.

answered 23 Jan '11, 08:28

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%