https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7281
--- Comment #2 from Stephen Donnelly <stephen@xxxxxxxxxx> 2012-05-23 16:21:10 PDT ---
(In reply to comment #1)
> What about pcap-NG files with a LINKTYPE_ERF interface or interfaces?
Already covered, as the pcap-ng file PB/EPB should already have the
interface_id set. It should not be necessary to extract it from the ERF pseudo
header.
A pcap-ng file with LINKTYPE_ERF can come from:
1) Reading an ERF or pcap LINKTYPE_ERF file and saving as pcap-ng. In this case
WTAP_HAS_INTERFACE_ID already with Bug #7266 and this patch.
2) Dumpcap live capture in pcap format (single capture device) with
LINKTYPE_ERF. This should be covered in this patch, since when Wireshark opens
the temporary file it will use this code?
3) Dumpcap live capture in pcap-ng format (single or multiple capture devices)
with LINKTYPE_ERF. This is trickier, and I am looking at dumpcap support in a
following patch.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
