How to write into existing pcap file

Dec 25, 2013 at 2:00 PM
Hi.

I'm trying to dump generated packets into existing pcap file, but I can't figure out how to open Pcap file without deleting it.

Any idea how to do this?
Coordinator
Dec 30, 2013 at 4:42 AM
Hi aderam,

You can dump the packets to a new file and use mergepcap to merge the pcap files.
You can also read the pcap file and create a new file with these packets and the new packets you want to append.

As far as I know, appending to an existing pcap file is not possible using the existing WinPcap functions that Pcap.Net wraps.

I hope this helps,

Boaz.
Marked as answer by anderam on 1/6/2014 at 3:54 AM
Jan 6, 2014 at 11:54 AM
Hi Brickner,

thanks for your response. I'll go with mergepcap.

Regards,
A.