What is the difference between these two? Should I start using pcap-ng at this point?
asked 23 Jan '11, 06:08
The file format pcap-ng extends the simple pcap format features with the options to store more capture related information, like extended time stamp precision, capture interface information, capture statistics, mixed link layer types, name resolution information, user comments, etc. See the wiki page for more file format information.
Currently there's limited support for pcap-ng, still considered experimental.
answered 23 Jan '11, 08:28