ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 1217] New: Request for unbuffered output on tshark

Date: Fri, 10 Nov 2006 22:20:19 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1217

           Summary: Request for unbuffered output on tshark
           Product: Wireshark
           Version: 0.99.3
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: TShark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: pierre.juhen@xxxxxxxxxx


Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
I would like to have an "unbuffered output" when tshark writes pcap packet in a
pipe.

I tried to pacth tshark by patching tshark.c
__________________________________________________
--- tshark.c~   2006-08-24 19:02:38.000000000 +0200
+++ tshark.c    2006-11-10 23:06:20.000000000 +0100
@@ -2132,11 +2132,12 @@
                        &err)) {
           /* Error writing to a capture file */
           show_capture_file_io_error(save_file, err, FALSE);
           wtap_dump_close(pdh, &err);
           exit(2);
-        }
+        } else if(line_buffered)
+                       wtap_dump_flush(pdh);
       }
     }
   }
   if (err != 0) {
     /* Print a message noting that the read failed somewhere along the line.
*/


_______________________

It seems not to work.

I still get the output by 4k buffers...

Any hint ?

Thank you, regards


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.