http://www.perlmonks.org?node_id=967453


in reply to parsing pcap-ng files

You need to upgrade libpcap libpcap-1.2.1 works for me on CentOS 6 Andrew Daviel

Replies are listed 'Best First'.
Re^2: parsing pcap-ng files
by erikh (Initiate) on Nov 28, 2012 at 16:11 UTC
    You can also try to convert the pcap-ng file to libpcap format at http://pcapng.com/
      Just convert it: editcap -F libpcap <file.pcapng> <file.pcap>
        The problem is pcap supports only µs resolution... For those of us that need nanosecond time resolution pcap file format is totally unacceptable. I have pcaps with 3ns time resolution using hardware timestamping and a 350 MHz ocillator.