Wireshark-dev: Re: [Wireshark-dev] Displaying interface names in Wireshark
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 03 Aug 2007 01:32:58 -0700
HPfrommer@xxxxxxxxxxxx wrote:


I've seen that the pcap packet header contains a field "Interface ID"
The pcap packet header, as defined by libpcap from tcpdump.org (which is the closest thing to an official pcap header definition that exists), has: 

	a time stamp, with seconds and microseconds;

	an on-the-wire length;

	a captured length;

and that's it.  No interface ID.

The pcap-NG packet header has an interface ID, but pcap-NG isn't pcap.