Does winpcap and sharppcap support the pcap-ng format

Question

I've a file in the pcapng format and want to open it by SharpPcap - that doesn't work.

SharpPcap uses Winpcap (libpcap).

So my question: Does WinPcap and/or SharpPcap support the pcap-ng format at the moment or in future? I can't find some current information about it, only some old posts.

score 1 · Accepted Answer · answered May 13 '14 at 17:11

1

Does WinPcap and/or SharpPcap support the pcap-ng format at the moment

No. Support for reading pcap-ng files was added to libpcap in libpcap 1.1.0, and the latest WinPcap is based on libpcap 1.0.0.

or in future?

Hopefully some future WinPcap release will be based on a recent libpcap release. This will require some work, mainly for remote-capture support with the new pcap_create()/pcap_activate() APIs.

answered May 13 '14 at 17:11

I can't find a source that shows me on which libpcap version the current WinPcap based. Do you have one? :) – Stampy May 14 '14 at 11:10
1

Yes. It's [the WinPcap source code](http://www.winpcap.org/install/bin/WpcapSrc_4_1_3.zip). – May 14 '14 at 17:18
This answer is not actual – Dmytro Ovdiienko Sep 14 '17 at 08:02
I'd like to mention that this hasn't been the case for a number of years now, sharppcap has supported pcap-ng for some time now. https://stackoverflow.com/a/65694772/299037 – Chris Morgan Sep 21 '21 at 18:52

Dmytro Ovdiienko · Answer 2 · 2019-03-28T09:33:42.917

0

To read timestamp with nanosecond precision

Update original WinPcap setup with WinPcap 4.1.3 - libpcap 1.7.3
Open file using pcap_open_offline_with_tstamp_precision function and pass PCAP_TSTAMP_PRECISION_NANO as a second parameter.
After that your app should treat pcap_pkthdr::ts structure returned from pcap_next as a seconds+nanoseconds.

Sorry, I did not have chance to port it to SharpPcap.

edited Mar 28 '19 at 09:33

answered May 16 '15 at 02:19

Dmytro Ovdiienko

816
8
9

Chris Morgan · Answer 3 · 2021-02-23T20:39:54.657

0

Yes. SharpPcap supports the latest libpcap and npcap releases and these releases support pcap-ng file format.

edited Feb 23 '21 at 20:39

answered Jan 13 '21 at 02:17

Chris Morgan

1,277
1
13
33

Does winpcap and sharppcap support the pcap-ng format

3 Answers3