Closed tsvehagen closed 7 years ago
https://wiki.wireshark.org/Development/LibpcapFileFormat#Global_Header
"For nanosecond-resolution files, the writing application writes 0xa1b23c4d, with the two nibbles of the two lower-order bytes swapped, and the reading application will read either 0xa1b23c4d (identical) or 0x4d3cb2a1 (swapped)."
https://wiki.wireshark.org/Development/LibpcapFileFormat#Global_Header
"For nanosecond-resolution files, the writing application writes 0xa1b23c4d, with the two nibbles of the two lower-order bytes swapped, and the reading application will read either 0xa1b23c4d (identical) or 0x4d3cb2a1 (swapped)."