Wireshark · Ethereal-dev: [Ethereal-dev] Interface and direction

[Paul Ionescu <paul@xxxxxxxx>]

As many capture formats have information about the interface and the
direction of the capture, would be nice to have those information in
standard frame structure.

In present, there are multiple pseudo-headers that support direction
(input/output), like ascend, ppp_with_direction, atm, x25 and so on.

Why not implement this in standard frame structure not in a particular
pseudo-header.

Other captures support multiple interfaces, but ethereal ignore the
information about the interface (this is the case of ascend, toshiba,
ngsniffer, netxray, iptrace and others). Usualy is not so interesting to
have the interface on which the packet is captured, but there are some
special cases when it makes difference, like ISDN PRI/BRI, because in
this case is hard to know on which B channel the packet is.

Also the modified pcap from redhat stores information about interface
and direction, and can capture from more than one interface.