PCAP\_DUMP(3PCAP) PCAP\_DUMP(3PCAP)

# [NAME](#NAME)

pcap\_dump - write a packet to a capture file

# [SYNOPSIS](#SYNOPSIS)

```
#include <pcap/pcap.h>
```

```
void pcap_dump(u_char *user, struct pcap_pkthdr *h,


    u_char *sp);
```

# [DESCRIPTION](#DESCRIPTION)

**pcap\_dump**() outputs a packet to the \`\`savefile'' opened with [**pcap\_dump\_open**(3PCAP)](/man/os/libpcap/pcap_dump_open.3PCAP). Note that its calling arguments are suitable for use with [**pcap\_dispatch**(3PCAP)](/man/os/libpcap/pcap_dispatch.3PCAP) or [**pcap\_loop**(3PCAP)](/man/os/libpcap/pcap_loop.3PCAP). If called directly, the *user* parameter is of type **pcap\_dumper\_t** as returned by **pcap\_dump\_open**().

# [SEE ALSO](#SEE_ALSO)

[**pcap**(3PCAP)](/man/os/libpcap/pcap.3PCAP)

8 March 2015

---

Document: pcap_dump(3pcap) from libpcap 1.11.0-r0 (Chainguard OS)
Source: https://github.com/the-tcpdump-group/libpcap.git