Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 7222] Saving a file may discard comments

Date: Tue, 5 Jun 2012 11:38:05 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7222

--- Comment #16 from Guy Harris <guy@xxxxxxxxxxxx> 2012-06-05 11:38:04 PDT ---
(In reply to comment #15)
> Whoops, missed that part of the original comment. What issue is preventing us
> from exporting as PCAP-NG? My understanding was that wiretap converts
> everything to a consistent internal format before Wireshark ever gets to it.

The per-packet headers in the file formats are mapped to information in a
common format, but the packet data isn't - the packet data's interpretation
depends on the Wiretap encapsulation type, and not all Wiretap encapsulation
types are supported in all capture file formats.  The set of encapsulations
supported by pcap and pcap-ng are listed at

    http://www.tcpdump.org/linktypes.html

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.