So in order to support a new data source only libpcap should be
modified? I have no experience with it, so I'm not sure how wireshark
and libpcap are interfaced... Does libpcap offer a list of available
capture source for wireshark, so it can use a new capture source
without any modification to wireshark?
In this case the libpcap developers would be more able to help me get started...
Regards,
Ákos Vandra
On 3 December 2011 18:15, Guy Harris <guy@xxxxxxxxxxxx> wrote:
>
> On Dec 3, 2011, at 2:00 AM, Akos Vandra wrote:
>
>> I have a custom interface generating packet data. I'd like to use
>> wireshark to display them and dissect the packets.
>>
>> The dissection I can do with dissector plugins, but how can I feed the
>> packet data to wireshark?
>
> Make a patch to libpcap/WinPcap to support your custom interface? That way, not only will Wireshark support it without any changes, but other programs that use libpcap/WinPcap could support it as well.
> ___________________________________________________________________________
> Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
