Last Modified: Oct 20, 2022
Opened: Jun 08, 2021
When tcpdump captures are done to a file, the pcap file includes FILEINFO which has version, platform and other such information but the information is incorrect.
Correct information about version and platform cannot be obtained from captured file
Tcpdump capture to a file (-w optin) is performed
FILEINFO will have correct version, platform and other information