pcap_file() returns the standard I/O stream of the ``savefile,''
if a ``savefile'' was opened with pcap_open_offline(3PCAP), or
NULL, if a network device was opened with pcap_create(3PCAP) and
pcap_activate(3PCAP), or with pcap_open_live(3PCAP).
Note that the Packet Capture library is usually built with large
file support, so the standard I/O stream of the ``savefile''
might refer to a file larger than 2 gigabytes; applications that
use pcap_file() should, if possible, use calls that support large
files on the return value of pcap_file() or the value returned by
fileno(3) when passed the return value of pcap_file().
This page is part of the libpcap (packet capture library)
project. Information about the project can be found at
⟨http://www.tcpdump.org/⟩. If you have a bug report for this
manual page, see ⟨http://www.tcpdump.org/#patches⟩. This page
was obtained from the project's upstream Git repository
⟨https://github.com/the-tcpdump-group/libpcap.git⟩ on 2021-08-27.
(At that time, the date of the most recent commit that was found
in the repository was 2021-08-17.) If you discover any rendering
problems in this HTML version of the page, or you believe there
is a better or more up-to-date source for the page, or you have
corrections or improvements to the information in this COLOPHON
(which is not part of the original manual page), send a mail to
3 January 2014 PCAP_FILE(3PCAP)