Wireshark-dev: [Wireshark-dev] tvb buffer

From: Amit Paliwal <Amit.Paliwal@xxxxxxxxxxxxxxx>
Date: Mon, 9 Jun 2008 10:49:40 +0530


I know that in wireshark when a farme is selected the top level dissector is called like ethernet which in turn calls other dissectors. But I really want to know where is this buffer tvb constructed for the first time which is than passed to subsequent dissectors. Is it constructed from the raw data received on the network card.

______________________________________________________________________