Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 7222] Saving a file may discard comments

Date: Tue, 5 Jun 2012 11:43:13 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7222

--- Comment #17 from Tyson Key <tyson.key@xxxxxxxxx> 2012-06-05 11:43:13 PDT ---
Just my educated guesses:

 * For some (link-layer) protocols (e.g. DPNSS, ISDN, and GSM Um), there simply
isn't a registered DLT value associated with them - so exporting packets is
difficult to implement.

  * In the case of GSM Um (which is mostly stored in XML files generated by a
family of OSS tools), it might be difficult to determine just how things should
be serialised for export, so that DLT values can be agreed upon.

  * For DPNSS, I don't know what needs to be agreed upon, in order for a DLT to
be supplied - and I've only ever seen traces generated by a proprietary
hardware/software combination in the wild.

There might be other issues to contend with - but those seemed to be the most
obvious to me.

(In reply to comment #15)
> (In reply to comment #14)
> > The problem here is (as I understand it) that Wireshark *can't* convert it to
> > PCAP-NG.
> 
> Whoops, missed that part of the original comment. What issue is preventing us
> from exporting as PCAP-NG? My understanding was that wiretap converts
> everything to a consistent internal format before Wireshark ever gets to it.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.