tags:

views:

44

answers:

0

How can I determine if a saved .pcap file contains an ERF (Extensible Record Format) header? pcap_open_offline() doesn't provide this information. I'm running into issues where some captures I open have the 16-byte header, and some don't, and I can't find any documentation online in how to determine the format.