#ifndef WORDS_BIGENDIAN // Little endian magic #define PCAP_MAGIC 0xa1b2c3d4 #else // Big endian magic #define PCAP_MAGIC 0xd4c3b2a1 #endif Shouldn't this be switched in the wtaplocaldump.h Reproducible: Always Steps to Reproduce: 1. 2. 3.
nope, this is correct: LITTLE endian = 0xa1b2c3d4 BIG endian = 0xd4c3b2a1 and that is exactly what the code you cc'ed says. Can you please verify the issue you described still exists?