Hello Golnaz, I noticed this: > char *capture_file; > pcap_t *pcap_open_offline(char *scapturefile,char *errbuf); I take it that one of these is a typo (capturefile / scapturefile), but as far as I can tell, the variable is not initialized when you call pcap_open_offline. Camiel.