http://www.perlmonks.org?node_id=1018945


in reply to Re^2: parsing pcap-ng files
in thread parsing pcap-ng files

Just convert it: editcap -F libpcap <file.pcapng> <file.pcap>

Replies are listed 'Best First'.
Re^4: parsing pcap-ng files
by Anonymous Monk on Mar 19, 2015 at 19:09 UTC
    The problem is pcap supports only µs resolution... For those of us that need nanosecond time resolution pcap file format is totally unacceptable. I have pcaps with 3ns time resolution using hardware timestamping and a 350 MHz ocillator.