Re: How to read a big pcap file?

[Guy Harris <guy () alum mit edu>]

On Oct 19, 2010, at 5:52 AM, Subhasis Mohapatra (submohap) wrote:

> I have designed a tool using libpcap,but its not reading big pcaps.

What does "big" mean here?  Larger than 2GB, larger than 4GB, or larger than some other value?

What happens if your tool tries to read a big pcap file?

What operating system is this on, and what version of libpcap is your program linked with?

Older versions of libpcap might not support files >2GB (or possibly >4GB) on some platforms; newer versions (1.0.0 and 
later) should support them on all platforms where the underlying OS supports them.  (On *BSD and Mac OS X, all versions 
should support files >4GB.)-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.