Wireshark · Wireshark-dev: Re: [Wireshark-dev] Is pcap-ng/ntar still in roadmap?

["Gianluca Varenni" <gianluca.varenni@xxxxxxxxxxxx>]

----- Original Message ----- 
From: "Guy Harris" <guy@xxxxxxxxxxxx>
To: "Developer support list for Wireshark" <wireshark-dev@xxxxxxxxxxxxx>
Sent: Friday, January 12, 2007 11:59 AM
Subject: Re: [Wireshark-dev] Is pcap-ng/ntar still in roadmap?


> Gianluca Varenni wrote:
>
> > I would prefer to have a separate API set (being it NTAR or anything 
> > else)
> > to deal with capture files.
> >
> > One of the things I like less about libpcap is that the API to read/write
> > files is too much tied to the capture one without any specific reason.
>
> That somewhat collides with WinPcap's pcap_open(), which can either open
> a capture device or a capture file.

Right. And strictly speaking I never liked that API too much (as much as I 
love pcap_next_ex, instead). The problem is always the same. If you have a 
single API to open files and capture devices, you are somewhat limited to 
the operations you can do on files. And worse, the problem in the pcap API 
is that you use a pcap_t handle to read a file, and a pcap_dumper_t handle 
to write a file. Why?

GV


> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev