Re: [Wireshark-dev] Wireshark 1.7.1 is now available

[Sreenivasulu Yellamaraju <Sreenivasulu.Yellamaraju () csr com>]

Please see inline

Regards,
Sreenivasulu Y
Senior Lead Engineer,
CSR India Pvt Ltd,
Direct Dial: +91 80 25183091

-----Original Message-----
From: wireshark-dev-bounces () wireshark org [mailto:wireshark-dev-bounces () wireshark org] On Behalf Of Guy Harris
Sent: Saturday, April 07, 2012 9:05 AM
To: Developer support list for Wireshark
Cc: Community support list for Wireshark
Subject: Re: [Wireshark-dev] Wireshark 1.7.1 is now available


On Apr 6, 2012, at 6:57 PM, Gerald Combs wrote:

>     o Wireshark, TShark, and their associated utilities now save
>       files using the pcap-ng file format by default. (Your copy of
>       Wireshark might still use the pcap file format if pcap-ng is
>       disabled in your preferences.)

Note that libpcap 1.1 and later can read pcap-ng files as long as all interfaces whose packets are in the file have the 
same link-layer type and snapshot length (which will, obviously, always be the case if it was captured on only one 
interface).  Annotations are not seen by the application (and thus not written by libpcap-based programs), as the 
libpcap API doesn't currently provide a way to see them, but they won't prevent a libpcap-based program from reading a 
file with annotations.

>     o When saving packets, the default choice is now to save only
>       the displayed packets rather than all packets.

...and, I think, packets that are included in reassemblies with the displayed packets, right?
[Sreenivasulu] Is this answered anywhere else? This is also important in the context of 802.11 aggregated packets. The 
user might 
miss some important packets in a group that otherwise are excluded from the results of current display filter!!


___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


 To report this email as spam click https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg== .


Member of the CSR plc group of companies. CSR plc registered in England and Wales, registered number 4187346, 
registered office Churchill House, Cambridge Business Park, Cowley Road, Cambridge, CB4 0WZ, United Kingdom
More information can be found at www.csr.com. Follow CSR on Twitter at http://twitter.com/CSR_PLC and read our blog at 
www.csr.com/blog
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe