[Winpcap-users] Is there any way to get packet size in bytes from.pcap files

Gianluca Varenni gianluca.varenni at cacetech.com
Thu May 25 14:53:45 GMT 2006

Do you mean "with a custom winpcap based app" ? If so, yes.

>From my understanding, it seems that you want to take a pcap file and strip 
the L2 header (ethernet?), in orfer to obtain IP (or UDP/TCP/??) packets, 
right. If so, windump cannot do that. I don't know if any of the command 
line tools available with ethereal can do that.

Have a nice day

----- Original Message ----- 
From: <jaykishan_garach at yahoo.com>
To: <winpcap-users at winpcap.org>
Sent: Thursday, May 25, 2006 5:23 AM
Subject: [Winpcap-users] Is there any way to get packet size in bytes 
from.pcap files

> Hello all,
>     For each packet of .pcap file, I need to know the
> size in bytes. Is there a way to find it out.
>     I knew of this Windump tool, but I want to give a
> .pcap file as input to this windump.exe and the output
> desired is packet type (UDP, RTP) and size of each
> packet.
>     Any suggestions which results into this output
> will be helpful.
> Regards,
> Jaykishan.
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users 

More information about the Winpcap-users mailing list