Wireshark-dev: Re: [Wireshark-dev] Is it must to have dumpcap built in wireshark-1.0.0in order
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Lars Ruoff" <lars.ruoff@xxxxxxxxxxxxxxxxx>
Date: Fri, 30 May 2008 17:53:34 +0200

> Is it must to have dumpcap built along with tshark to get packet captured?

Yes.

> and if it can't run without dumpcap then why the configure option of
disable-dumpcap?

You can run tshark on files (see option -r) rather than on life capture
data.
In this mode you do NOT need dumpcap, hence the build option.

Br,
Lars