Wireshark mailing list archives
Re: Devices in tshark versus dumpcap
From: Gisle Vanem <gisle.vanem () gmail com>
Date: Sun, 30 Apr 2017 11:27:16 +0200
Graham Bloice wrote:
Which branch though, master or master-2.2?
'master' it seems. But I tried to resolve the issue myself. First by trying w/o HAVE_EXTCAP (to exclude any problems with that). But that is impossible. E.g.: capture_sync.c(521): error C2039: 'extcap_fifo': is not a member of 'interface_options_tag' etc. etc. The is for sure a problem in how lines of text are generated in dumpcap.exe and how tshark is interpreting them. I'm not even sure the lines have "\r\n" terminations since from dumpcap.c: #ifdef _WIN32 /* set output pipe to binary mode, to avoid ugly text conversions */ _setmode(2, O_BINARY); And in capchild/capture_ifinfo.c: raw_list = g_strsplit(data, "\r\n", 0); Can you (or someone else) send the output of: tshark.exe -o console.log.level:252 -D So I can guess what's wrong here? -- --gv ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Devices in tshark versus dumpcap Gisle Vanem (Apr 29)
- Re: Devices in tshark versus dumpcap Graham Bloice (Apr 29)
- Re: Devices in tshark versus dumpcap Gisle Vanem (Apr 29)
- Re: Devices in tshark versus dumpcap Graham Bloice (Apr 29)
- Re: Devices in tshark versus dumpcap Gisle Vanem (Apr 30)
- Re: Devices in tshark versus dumpcap Gisle Vanem (Apr 30)
- Re: Devices in tshark versus dumpcap Gisle Vanem (Apr 30)
- Re: Devices in tshark versus dumpcap Gisle Vanem (Apr 29)
- Re: Devices in tshark versus dumpcap Graham Bloice (Apr 29)
- <Possible follow-ups>
- Devices in tshark versus dumpcap Gisle Vanem (Apr 29)