Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

splitting pcap file with editcap

I'm looking for information on the file format of the saved split pcap files saved by EditCap. They're saved with a .pcap file extension, but don''t seem to contain the GlobalHeader information in the same format as the original. Is there a different format used before the Record Headers?