wiresharkpcaplibpcapwinpcapsharppcap

Does winpcap and sharppcap support the pcap-ng format

I've a file in the pcapng format and want to open it by SharpPcap - that doesn't work.

SharpPcap uses Winpcap (libpcap).

So my question: Does WinPcap and/or SharpPcap support the pcap-ng format at the moment or in future? I can't find some current information about it, only some old posts.

Solution

  • Does WinPcap and/or SharpPcap support the pcap-ng format at the moment

    No. Support for reading pcap-ng files was added to libpcap in libpcap 1.1.0, and the latest WinPcap is based on libpcap 1.0.0.

    or in future?

    Hopefully some future WinPcap release will be based on a recent libpcap release. This will require some work, mainly for remote-capture support with the new pcap_create()/pcap_activate() APIs.