Wireshark-bugs: [Wireshark-bugs] [Bug 7281] Patch: Add frame.interface_id support for pcap DLT_E
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 23 May 2012 16:21:10 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7281

--- Comment #2 from Stephen Donnelly <stephen@xxxxxxxxxx> 2012-05-23 16:21:10 PDT ---
(In reply to comment #1)
> What about pcap-NG files with a LINKTYPE_ERF interface or interfaces?

Already covered, as the pcap-ng file PB/EPB should already have the
interface_id set. It should not be necessary to extract it from the ERF pseudo
header.

A pcap-ng file with LINKTYPE_ERF can come from:

1) Reading an ERF or pcap LINKTYPE_ERF file and saving as pcap-ng. In this case
WTAP_HAS_INTERFACE_ID already with Bug #7266 and this patch.

2) Dumpcap live capture in pcap format (single capture device) with
LINKTYPE_ERF. This should be covered in this patch, since when Wireshark opens
the temporary file it will use this code?

3) Dumpcap live capture in pcap-ng format (single or multiple capture devices)
with LINKTYPE_ERF. This is trickier, and I am looking at dumpcap support in a
following patch.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.