Wireshark · Wireshark-dev: Re: [Wireshark-dev] converting pcapng to pcap

[albert <alo@xxxxxxxxxxxxxx>]

Guy Harris <guy@...> writes:
> 
> 
> So:
> 
> 	if the callback *is* pcap_dump() (whose API was designed to allow it to 
act as a callback for pcap_loop() or
> pcap_dispatch()), only half of the format-conversion work is done in the 
callback;
> 
> 	if the callback isn't pcap_dump(), just some routine that calls 
pcap_dump(), none of the
> format-conversion work is done in the callback.
> 
> 

Thanks again for your response.
What/where is/are the function(s) that determine(s) whether the callback for 
next_packet_op is going to be pcap_dump() or some other higher level routine  ?  
Is this a function that the user must supply ?


thx.
Cheers,
Albert