Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 1882] Use more meaningful temp file: /tmp/wireshark.<iface

Date: Wed, 10 Nov 2010 14:22:50 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1882

--- Comment #5 from Guy Harris <guy@xxxxxxxxxxxx> 2010-11-10 14:22:48 PST ---
There's "interface name" as in "description intended to be human-readable" and
there's "interface name" as in "what gets passed to pcap_open_live(),
pcap_create(), or pcap_open()".

There is, in fact, no guarantee that there *is* a description, and it could
well be a fairly clunky string.

*If* you're capturing on an interface, rather than capturing from a pipe, there
*is* a guarantee that there's a name passed to the pcap routine.  From the
example given:

    /tmp/wireshark.2007-04-15--1355.eth0.asdfGth

he probably meant the name passed to the pcap routine, e.g. "eth0".

On Windows, the full name in Chris's example would be

   \Device\NPF_{7798FBA2-0E70-403F-BFD4-76F44AFB62FD}

("(Intel(R) 82567LM Gigabit Network Connection (Microsoft's Packet Scheduler)"
is the description); we'd probably want to just extract the UUID from that
name, e.g.

    {temp
directory}\wireshark.2010-11-10--1355.7798FBA2-0E70-403F-BFD4-76F44AFB62FD.asdfGth

which is a *bit* long.  On UN*X, it'd be somewhat simpler, as UN*X interface
names tend to be short and sweet.

If we're capturing on a pipe, we should probably just choose the last component
of the pathname of the pipe.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.