Wireshark-bugs: [Wireshark-bugs] [Bug 7381] pcapng - mergecap generates unusable file if interfa
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 11 Jul 2012 10:16:22 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7381

--- Comment #11 from Guy Harris <guy@xxxxxxxxxxxx> 2012-07-11 10:16:21 PDT ---
(In reply to comment #10)
> The IDB:
> 
> https://www.winpcap.org/ntar/draft/PCAP-DumpFileFormat.html#sectionidb
> 
> also is allowed to contain the MAC and/or IPv4 and/or IPv6 addresses of the
> interface.  The MAC, in particular, should be a pretty good way to uniquely
> identify an interface.  (No, it wouldn't work for localhost and it's much less
> unique for VMs, but...)

...and we don't, as far as I know, currently add it to pcap-ng files
(libpcap/WinPcap currently offer no API to get it, so Wireshark, and anything
else writing pcap-ng files, would have to make platform-dependent calls to get
it).

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.