[Winpcap-users] pcap_open_offline returns "bad dump file

Guy Harris guy at alum.mit.edu
Wed Apr 4 18:20:03 GMT 2007


Narayanasamy, Raja M wrote:

> The summary dialog shows the format as “Network 
> Associates Sniffer (Windows-based) 2.00x”.

Then it's *not* a pcap file, and libpcap/WinPcap can't read it.

You could try saving it from Ethereal in pcap format, or use editcap to 
translate it to pcap format:

	editcap -F libpcap {input file name} {output file name}

and then try to read the pcap file.


More information about the Winpcap-users mailing list