Wireshark-dev: Re: [Wireshark-dev] tvb buffer

From: "Gilbert Ramirez" <gram@xxxxxxxxxxxxxxx>
Date: Mon, 9 Jun 2008 10:58:54 +0530

The pcap library collects the data from the operating system. That
gets passed to wireshark and the tvb is created.

--gilbert

On 6/9/08, Amit Paliwal <Amit.Paliwal@xxxxxxxxxxxxxxx> wrote:
>
> I know that in wireshark when a farme is selected the top level dissector is
> called like ethernet which in turn calls other dissectors. But I really want
> to know where is this buffer tvb constructed for the first time which is
> than passed to subsequent dissectors. Is it constructed from the raw data
> received on the network card.
>
> ______________________________________________________________________
>
> _______________________________________________
>  Wireshark-dev mailing list
>  Wireshark-dev@xxxxxxxxxxxxx
>  https://wireshark.org/mailman/listinfo/wireshark-dev
>
>