Wireshark mailing list archives

Re: How does dumpcap.c communicate linktype when pushing packets into the rest of Wireshark?


From: Jeff Morriss <jeff.morriss.ws () gmail com>
Date: Thu, 10 May 2012 17:06:36 -0400

Richard Sharpe wrote:
Hi folks,

The problem with my changes to support pcap-ng through pipes seems to
be that I am not communicating linktype correctly.

What is the secret?

IIRC Wireshark gets the linktype of the interfaces BEFORE the capture
starts.  But I never actually worked in this area.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: