Re: extcap tools

[Guy Harris <guy () alum mit edu>]

On Mar 23, 2019, at 1:21 PM, Ross Jacobs <rossbjacobs () gmail com> wrote:

> I am confused by differences in extcap between the CLI and the GUI. By default (in 3.0.0 on both Windows, Macos), 
> extcap tools are presented as interfaces on the capture page. 
> <Screen Shot 2019-03-23 at 8.11.37 PM.png>

And in TShark, they're presented in the list of devices printed by the -D flag, because it can capture on them.

> Questions 
> 1. In the Wireshark GUI, if you go to About > Plugins, you can see the extcap directories.

By which you presumably mean "you can see the full path of all extcap *executables*.

If you want to see the extcap *directory*, you want About > Folders.

> Is it possible to get the extcap directory using a CLI command like tshark,

tshark -G folders, which is the equivalent of About > Folders.

There is no way to list the full paths of extcap executables from the command line; tshark -G plugins, which looks as 
if it's *intended* to be the equivalent of About > Folders, lists only run-time-loadable-object and Lua plugins, not 
extcap plugins.

> 2. Why does dumpcap -D not show the same interfaces that the GUI does?

Either because 1) there's a bug or 2) it can't capture on extcap devices, so it shouldn't report them.  From a quick 
test, it appears that 2) is the case here.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe