filepcaplibpcap

Does pcap_open_offline (pcap_dump_open) function overwrite or append?


I can't find in the documentation where the mode of the open file (overwrite vs. append) is specified.

Thank you for clarification.


Solution

    1. You meant pcap_dump_open().
    2. It overwrites; pcap_dump_open_append() appends.