Hi, I'm using libpcap in programs I'm writing and I already have saved capture files. I've seen many examples of using pcap_compile() and pcap_setfilter() for capturing live packets, but none for use with offline files. The last argument to pcap_compile() seems to be an IP address, but obviously if you're opening a file, there's no device and hence no address.
Regards, Nicky Chorley - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
