%% You should probably cite draft-ietf-opsawg-pcap-04 instead of this revision. @techreport{ietf-opsawg-pcap-00, number = {draft-ietf-opsawg-pcap-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-opsawg-pcap/00/}, author = {Guy Harris and Michael Richardson}, title = {{PCAP Capture File Format}}, pagetotal = 36, year = 2021, month = oct, day = 25, abstract = {This document describes the format used by the libpcap library to record captured packets to a file. Programs using the libpcap library to read and write those files, and thus reading and writing files in that format, include tcpdump.}, }