Wireshark · Ethereal-dev: [Ethereal-dev] question about the process of saving the capture file

["Li Haijiang" <lhjiang@xxxxxx>]

Hi 
  I found the function of "File->save/save as" is a process of copy the temp
captured file to the named file.When I start the capture,i found the temp capture
file is created and written.after stoping the capture,the temp file is full of the
captured packet data.then It read the temp file and analyze the captured data to
show the packet summary information and protocol infomation in main window.But I
am still sure of the process of writting the capture data into the temp file.I
have read the source of ethereal-0.10.4 for
example:do_capture(),normal_do_capture(),capture() in the capture.c and wtap.c.But
I am not sure which function is really the function that wrote the data into the
temp file??Can you give me some directions??
Thanks.




--------------------------------------------------
Lihaijiang