Wireshark-dev: Re: [Wireshark-dev] Wireshark pcap-ng information needed
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Fri, 11 Jan 2008 03:45:04 +0100
Luis EG Ontanon schrieb:

On Jan 11, 2008 3:26 AM, Stephen Fisher <stephentfisher@xxxxxxxxx> wrote:

On Fri, Jan 11, 2008 at 03:03:13AM +0100, Ulf Lamping wrote:

I have a running *prototype*, which can read simple pcap-ng files.

I've written down some basic information about it, please have a look
at: http://wiki.wireshark.org/Development/PcapNg

Thanks!  I think committing your code in its current shape would be the
best way for everyone to collaborate on it as they have time/interest.
Since pcap-ng files are not seen in the wild, the code will only execute
when someone is coding for it.


Not long ago I added the possibility to add wiretap plug-ins, can this
be the candidate for the first checked-in file format plug-in?
Not really, as adding pcapng only makes real sense when the new pcapng functionality is used, which needs lot's of enhancements / changes in the wiretap API.
The current wiretap API directly reflects the libpcap file format limitations ... 

Regards, ULFL