Wireshark · Ethereal-dev: Re: [Ethereal-dev] pcap_next_ex patch

[Guy Harris <gharris@xxxxxxxxx>]

Ulf Lamping wrote:

> You mean libpcap? I would think that the whole code should only be
> compiled with WinPcap?!?
>
> ... and pcap_next_ex is marked as win32 only.

That's out of date, at least as of libpcap 0.8, although pcap_dispatch() 
might work better than pcap_next_ex() if it can be used (as 
pcap_next_ex() is sort of like a call to pcap_dispatch() with a count of 
1 and with a special callback routine).

WinPcap 3.1b4, at least, has

	int      pcap_next_ex(pcap_t *, struct pcap_pkthdr **, const u_char **);

as it's based on libpcap 0.8 (although the final 3.1 release *might* be 
0.9-based - but the last argument will still be a "const u_char **").