I would like to know if libpcap latest version (1.8.1) support writing pcapng format ? From reading different blogs, I see it supports only reading pcapng format. However I see that wireshark supports both read/write pcapng. So, Has wireshark implemented writing in pcapng format ?. Kindly let me know. Thanks asked 02 Jun '17, 03:36  subhashmohan edited 02 Jun '17, 03:37 |
2 Answers:
Wireshark has supported reading and writing in pcap-ng for a long time. Wireshark has its own code to read and write pcap-ng files. As far as I know libpcap does not support writing pcap-ng files. Questions abou that are better asked on tcpdump mailing lists. answered 02 Jun '17, 05:37  Anders ♦ |
No. answered 02 Jun '17, 19:08  Guy Harris ♦♦ |
Thanks will check with tcpdump mailing lists..