Wireshark · Wireshark-users: Re: [Wireshark-users] [HELP] How to send bytes to wireshark on runtime

[Sam Roberts <vieuxtech@xxxxxxxxx>]

On Thu, Aug 6, 2009 at 6:48 PM, Guy Harris<guy@xxxxxxxxxxxx> wrote:
> It's a bit non-obvious. but if you want Wireshark to start capturing
> immediately, you have to specify the "-k" flag as well:
>
>        wireshark -i /full/path/to/fifo.pcap -k

The -k works like a charm, thanks.

>> Is there a way to do this?
>
> Write the code in C, instead, and add it to libpcap; then either

Maybe we'll try this sometime. I'm not sure how rich the pcap
interface is, there is some information, such as channel to listen on,
that needs to be known in order to capture.

Cheers,
Sam