[Winpcap-users] Is there any way to get packet size in bytes from.pcap files

[Gianluca Varenni]

Do you mean "with a custom winpcap based app" ? If so, yes.

>From my understanding, it seems that you want to take a pcap file and strip 
the L2 header (ethernet?), in orfer to obtain IP (or UDP/TCP/??) packets, 
right. If so, windump cannot do that. I don't know if any of the command 
line tools available with ethereal can do that.

Have a nice day
GV



----- Original Message ----- 
From: <jaykishan_garach at yahoo.com>
To: <winpcap-users at winpcap.org>
Sent: Thursday, May 25, 2006 5:23 AM
Subject: [Winpcap-users] Is there any way to get packet size in bytes 
from.pcap files


> Hello all,
>
>     For each packet of .pcap file, I need to know the
> size in bytes. Is there a way to find it out.
>
>     I knew of this Windump tool, but I want to give a
> .pcap file as input to this windump.exe and the output
> desired is packet type (UDP, RTP) and size of each
> packet.
>
>     Any suggestions which results into this output
> will be helpful.
>
> Regards,
> Jaykishan.
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users