Wireshark mailing list archives

Re: Adding a new data source


From: Akos Vandra <axos88 () gmail com>
Date: Sat, 3 Dec 2011 18:40:35 +0100

So in order to support a new data source only libpcap should be
modified? I have no experience with it, so I'm not sure how wireshark
and libpcap are interfaced... Does libpcap offer a list of available
capture source for wireshark, so it can use a new capture source
without any modification to wireshark?

In this case the libpcap developers would be more able to help me get started...

Regards,
  Ákos Vandra

On 3 December 2011 18:15, Guy Harris <guy () alum mit edu> wrote:

On Dec 3, 2011, at 2:00 AM, Akos Vandra wrote:

I have a custom interface generating packet data. I'd like to use
wireshark to display them and dissect the packets.

The dissection I can do with dissector plugins, but how can I feed the
packet data to wireshark?

Make a patch to libpcap/WinPcap to support your custom interface?  That way, not only will Wireshark support it 
without any changes, but other programs that use libpcap/WinPcap could support it as well.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: