Wireshark-users: Re: [Wireshark-users] [HELP] How to send bytes to wireshark on runtime

From: Sam Roberts <vieuxtech@xxxxxxxxx>
Date: Fri, 7 Aug 2009 09:59:35 -0700

On Thu, Aug 6, 2009 at 6:48 PM, Guy Harris<guy@xxxxxxxxxxxx> wrote:
> It's a bit non-obvious. but if you want Wireshark to start capturing
> immediately, you have to specify the "-k" flag as well:
>
>        wireshark -i /full/path/to/fifo.pcap -k

The -k works like a charm, thanks.

>> Is there a way to do this?
>
> Write the code in C, instead, and add it to libpcap; then either

Maybe we'll try this sometime. I'm not sure how rich the pcap
interface is, there is some information, such as channel to listen on,
that needs to be known in order to capture.

Cheers,
Sam