Wireshark · Wireshark-dev: Re: [Wireshark-dev] How does dumpcap.c communicate linktype when pushing packets into the rest of Wi

Wireshark-dev: Re: [Wireshark-dev] How does dumpcap.c communicate linktype when pushing packets

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>

Date: Thu, 10 May 2012 17:06:36 -0400

Richard Sharpe wrote:
> Hi folks,
> 
> The problem with my changes to support pcap-ng through pipes seems to
> be that I am not communicating linktype correctly.
> 
> What is the secret?

IIRC Wireshark gets the linktype of the interfaces BEFORE the capture
starts.  But I never actually worked in this area.

Follow-Ups:
- Re: [Wireshark-dev] How does dumpcap.c communicate linktype when pushing packets into the rest of Wireshark?
  - From: Guy Harris

References:
- [Wireshark-dev] How does dumpcap.c communicate linktype when pushing packets into the rest of Wireshark?
  - From: Richard Sharpe

Prev by Date: [Wireshark-dev] How does dumpcap.c communicate linktype when pushing packets into the rest of Wireshark?
Next by Date: Re: [Wireshark-dev] Using global variables to store dissection?information
Previous by thread: [Wireshark-dev] How does dumpcap.c communicate linktype when pushing packets into the rest of Wireshark?
Next by thread: Re: [Wireshark-dev] How does dumpcap.c communicate linktype when pushing packets into the rest of Wireshark?
Index(es):
- Date
- Thread