Wireshark-dev: Re: [Wireshark-dev] Displaying interface names in Wireshark

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 03 Aug 2007 01:32:58 -0700

HPfrommer@xxxxxxxxxxxx wrote:

I've seen that the pcap packet header contains a field "Interface ID"

The pcap packet header, as defined by libpcap from tcpdump.org (which is the closest thing to an official pcap header definition that exists), has:

	a time stamp, with seconds and microseconds;

	an on-the-wire length;

	a captured length;

and that's it.  No interface ID.

The pcap-NG packet header has an interface ID, but pcap-NG isn't pcap.