Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-commits: [Wireshark-commits] master dd538c4: Always use the file header to set the encaps

From: Wireshark code review <code-review-do-not-reply@xxxxxxxxxxxxx>
Date: Thu, 15 Nov 2018 02:30:40 +0000
URL: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=dd538c4170abfc595cc49146baf0e968b1b3d2d9
Submitter: "Guy Harris <guy@xxxxxxxxxxxx>"
Changed: branch: master
Repository: wireshark

Commits:

dd538c4 by Guy Harris (guy@xxxxxxxxxxxx):

    Always use the file header to set the encapsulation type for Peek classic.
    
    The information given by the person who provided the change to do so for
    V7 files seems to indicate that 1) V5 and V6 files have the same file
    header and 2) the protoNum field shouldn't be used for this purpose.
    
    It also provided information about the bits in the flags and status
    field, so add that.
    
    The first three of those bits appear to match the first three bits of
    the flags field in Peek tagged files, so note that in the Peek tagged
    reader, in case the other bits also match.
    
    Change-Id: I492afd594676efc14b487b3030c861bf5feb2d23
    Reviewed-on: https://code.wireshark.org/review/30647
    Reviewed-by: Guy Harris <guy@xxxxxxxxxxxx>
    

Actions performed:

    from  cdd3e9c   Dumpcap: Make sure we set our pipe error status.
     add  dd538c4   Always use the file header to set the encapsulation type for Peek classic.


Summary of changes:
 wiretap/peekclassic.c | 49 +++++++++++++++++++++++--------------------------
 wiretap/peektagged.c  |  2 ++
 2 files changed, 25 insertions(+), 26 deletions(-)