ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Is it must to have dumpcap built in wireshark-1.0.0in order

From: "Lars Ruoff" <lars.ruoff@xxxxxxxxxxxxxxxxx>
Date: Fri, 30 May 2008 17:53:34 +0200

> Is it must to have dumpcap built along with tshark to get packet captured?

Yes.

> and if it can't run without dumpcap then why the configure option of
disable-dumpcap?

You can run tshark on files (see option -r) rather than on life capture
data.
In this mode you do NOT need dumpcap, hence the build option.

Br,
Lars