 | 1 | initial version |
This is so I can use C code to parse the packets as if they arrived via a NIC.
For pcap files, and for pcapng files in which all the network interfaces have the same link-layer type and snapshot length (which includes all captures in which there is only one interface), you can use libpcap to read the file. Libpcap is provided with most if not all modern UN*Xes (you may have to install a "developer package" on Linux distributions), and is also available for Windows with Npcap (you'd have to install the Npcap SDK).
