[Winpcap-users] pcap_open_offline returns "bad dump file

Narayanasamy, Raja M raja.m.narayanasamy at intel.com
Wed Apr 4 20:29:24 GMT 2007


Thanks Guy Harris. That worked. I converted to pcap file using editcap
tool and now my application is able to parse. 


Warm Regards
Raja

-----Original Message-----
From: winpcap-users-bounces at winpcap.org
[mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Guy Harris
Sent: Wednesday, April 04, 2007 11:20 AM
To: winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] pcap_open_offline returns "bad dump file

Narayanasamy, Raja M wrote:

> The summary dialog shows the format as "Network 
> Associates Sniffer (Windows-based) 2.00x".

Then it's *not* a pcap file, and libpcap/WinPcap can't read it.

You could try saving it from Ethereal in pcap format, or use editcap to 
translate it to pcap format:

	editcap -F libpcap {input file name} {output file name}

and then try to read the pcap file.
_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users



More information about the Winpcap-users mailing list