http://www.perlmonks.org?node_id=1006064


in reply to Re: parsing pcap-ng files
in thread parsing pcap-ng files

You can also try to convert the pcap-ng file to libpcap format at http://pcapng.com/

Replies are listed 'Best First'.
Re^3: parsing pcap-ng files
by harryd100 (Initiate) on Feb 15, 2013 at 18:53 UTC
    Just convert it: editcap -F libpcap <file.pcapng> <file.pcap>
      The problem is pcap supports only µs resolution... For those of us that need nanosecond time resolution pcap file format is totally unacceptable. I have pcaps with 3ns time resolution using hardware timestamping and a 350 MHz ocillator.