ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] How to add a wtap encapsulation?

From: Yo Mismo <iokeze@xxxxxxxxxxx>
Date: Wed, 13 Oct 2010 15:48:00 +0000
I haven't got #define WTAP_ENCAP_IEEE802_15_4_NOFCS                127 in wtap.h :(
I have been reading pcap-common.c, I haven't asked for a new DLT_ value because my dissector and the encapsulation are for academic purpose only and wont be used in future.
 
>I don't know if this is your problem or not, but there's already a wiretap
>encapsulation defined as 127:
>
>#define WTAP_ENCAP_IEEE802_15_4_NOFCS                127
>
>You might also want to have a look at wiretap/pcap-common.c, especially the
>"Note" about what to do if you need a new encapsulation type for libpcap files.