create PCAP file for captured packet in c

Question

I am working on a tool though which I am able to capture incoming packets (l2 buffer and L2 length, payload) in an interface and I am able to print that packet on console. Now I want to write these packets to a pcap file so that I can transfer this file to other platform and read packet info.

How I can open a pcap file and write packet buffer to pcap file? How can I fill struct pcap_file_header?

Trudysfun · Accepted Answer · 2013-09-26 10:13:23Z

2

use pcap_dump to save the packet... this code might be useful :)

http://file-hub.com/cmd:thread/140400

answered Sep 26, 2013 at 10:13

Trudysfun

1815 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

user2818713 Over a year ago

I have packet buffer which I want to write to a pcap file

Trudysfun Over a year ago

how are you reading the packets? If you use pcap_loop with a dispatch function the packet header and packet data will be passed to that function... do you want to share your code? you might get an answer that better suits your needs

Wladimir Koroy · Accepted Answer · 2018-05-14 18:56:34Z

0

For writing pcap use library pcap_file_generator

Using:

int i=0;
  const int  PKTS_COUNT = 212000;
  int PKTS_LEN =  540;
  static ethernet_data_t  eda;
  eda.len = PKTS_LEN;

  PCAPFILE * pfl = lpcap_create("./pcaplibtestfile.pcap");
  for( i=0;i< PKTS_COUNT;i++ )
  {
    /* TODO:  fill data   memcpy(eda.data , YOUR_DATA_BUF,SIZE_YOUR_DATA_BUF  );
       eda.len = SIZE_YOUR_DATA_BUF;
    */
   lpcap_write_data( pfl , &eda , i, 0 );
  }
  lpcap_close_file( pfl );

answered May 14, 2018 at 18:56

Wladimir Koroy

1231 silver badge1 bronze badge

Collectives™ on Stack Overflow

create PCAP file for captured packet in c

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related