Re: Filebacked-tvbuffs : GSoC'13

[Guy Harris <guy () alum mit edu>]

On May 2, 2013, at 9:25 AM, Anders Broman <anders.broman () ericsson com> wrote:

> Alternatively if the file is rewritten on the first pass writing the reassembled data together with the packet 
> holding the last fragment the reassembled data could be read together with the packet
> But that might have other problems and might require changes to the file format description (pcap-ng)

Not all capture files are pcap-ng files.

Not all the capture files that aren't pcap-ng files are pcap files.

Not all the capture files that are neither pcap-ng files nor pcap files have link-layer header types supported by pcap 
or pcap-ng.

Anything that assumes that capture files are all pcap or pcap-ng won't work.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe