pcap_dump_ftell(3pcap)

pcap_dump_ftell3pcap

Get the current file offset for a savefile being written

Usage

#include <pcap/pcap.h>

long pcap_dump_ftell(pcap_dumper_t *p); int64_t pcap_dump_ftell64(pcap_dumper_t *p);

Overview

pcap_dump_ftell() returns the current file position for the ``savefile'', representing the number of bytes written by pcap_dump_open(3PCAP) and pcap_dump(3PCAP). PCAP_ERROR is returned on error. If the current file position does not fit in a long, it will be truncated; this can happen on 32-bit UNIX-like systems with large file support and on Windows. pcap_dump_ftell64() returns the current file position in a int64_t, so if file offsets that don't fit in a long but that fit in a int64_t are supported, this will return the file offset without truncation. PCAP_ERROR is returned on error.

Backward compatibility

The function pcap_dump_ftell64() became available in libpcap release 1.9.0. In previous releases, there was no mechanism to obtain a file offset that is too large to fit in a long.

Releases

9 releases since Debian 6.0 (Squeeze); the text changed 4 times.

  1. 6.0–7
  2. 8
  3. 9–10
  4. 11–13
  5. Arch

From libpcap 1.11.0-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.