Wireshark-users: Re: [Wireshark-users] [Wireshark-dev] Wireshark 1.7.1 is now available
Please see inline
Regards,
Sreenivasulu Y
Senior Lead Engineer,
CSR India Pvt Ltd,
Direct Dial: +91 80 25183091
-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: Saturday, April 07, 2012 9:05 AM
To: Developer support list for Wireshark
Cc: Community support list for Wireshark
Subject: Re: [Wireshark-dev] Wireshark 1.7.1 is now available
On Apr 6, 2012, at 6:57 PM, Gerald Combs wrote:
> o Wireshark, TShark, and their associated utilities now save
> files using the pcap-ng file format by default. (Your copy of
> Wireshark might still use the pcap file format if pcap-ng is
> disabled in your preferences.)
Note that libpcap 1.1 and later can read pcap-ng files as long as all interfaces whose packets are in the file have the same link-layer type and snapshot length (which will, obviously, always be the case if it was captured on only one interface). Annotations are not seen by the application (and thus not written by libpcap-based programs), as the libpcap API doesn't currently provide a way to see them, but they won't prevent a libpcap-based program from reading a file with annotations.
> o When saving packets, the default choice is now to save only
> the displayed packets rather than all packets.
...and, I think, packets that are included in reassemblies with the displayed packets, right?
[Sreenivasulu] Is this answered anywhere else? This is also important in the context of 802.11 aggregated packets. The user might
miss some important packets in a group that otherwise are excluded from the results of current display filter!!
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
To report this email as spam click https://www.mailcontrol.com/sr/wQw0zmjPoHdJTZGyOCrrhg== .
Member of the CSR plc group of companies. CSR plc registered in England and Wales, registered number 4187346, registered office Churchill House, Cambridge Business Park, Cowley Road, Cambridge, CB4 0WZ, United Kingdom
More information can be found at www.csr.com. Follow CSR on Twitter at http://twitter.com/CSR_PLC and read our blog at www.csr.com/blog
