PCAP_CLOSE(3PCAP)PCAP_CLOSE(3PCAP)pcap_close - close a capture device or savefile
#include <pcap/pcap.h>void pcap_close(pcap_t *p);
pcap_close() closes the files associated withp and deallocates resources. This means that, for example, ifp refers to a savefile that was opened withpcap_fopen_offline() orpcap_fopen_offline_with_tstamp_precision(), the stream provided to the routine will be closed unless it isstdin.
pcap(3PCAP),pcap_open_offline(3PCAP)
This page is part of thelibpcap (packet capture library) project. Information about the project can be found at ⟨http://www.tcpdump.org/⟩. If you have a bug report for this manual page, see ⟨http://www.tcpdump.org/#patches⟩. This page was obtained from the project's upstream Git repository ⟨https://github.com/the-tcpdump-group/libpcap.git⟩ on 2025-08-11. (At that time, the date of the most recent commit that was found in the repository was 2025-08-10.) If you discover any rendering problems in this HTML version of the page, or you believe there is a better or more up-to-date source for the page, or you have corrections or improvements to the information in this COLOPHON (which isnot part of the original manual page), send a mail to man-pages@man7.org 12 October 2024PCAP_CLOSE(3PCAP)HTML rendering created 2025-09-06 byMichael Kerrisk, author ofThe Linux Programming Interface. For details of in-depthLinux/UNIX system programming training courses that I teach, lookhere. Hosting byjambit GmbH. | ![]() |