commandpcapsharppcap

equivalent command to start/end time in sharpPcap


What is the equivalent command in sharpPcap to the wireshark command:

capinfos -a -e <pcap name>

This command returns the value of the start and the end time of the recording.

Thank You!


Solution

  • So what do you recommend in this case? For me it's okay if it's not exactly the exact time. I'm looking for something similar to the command I wrote, but in the C# language.

    Open the capture file and read all the packets. Save the time stamps of the first packet you read and the last packet you read. That's how capinfos does it.