Michael Roth wrote:
I wanted to propose a programming API, e.g. a DLL version of tshark.exe
which you could load once and then call on a per frame basis to get data
decoded into memory buffered PDML or something like that.
There's already an API from libwiretap, which both Wireshark and TShark
use to dissect packets - but it's currently not guaranteed to remain
unchanged from release to release. If the API stabilizes, there's a
good chance that it won't stabilize as the current API.
It dissects packets to yield a protocol tree.
