Wireshark-dev: Re: [Wireshark-dev] Wireshark pcap-ng information needed
From: Ulf Lamping <[email protected]>
Date: Fri, 11 Jan 2008 03:45:04 +0100
Luis EG Ontanon schrieb:
On Jan 11, 2008 3:26 AM, Stephen Fisher <[email protected]> wrote:
On Fri, Jan 11, 2008 at 03:03:13AM +0100, Ulf Lamping wrote:
I have a running *prototype*, which can read simple pcap-ng files.

I've written down some basic information about it, please have a look
at: http://wiki.wireshark.org/Development/PcapNg
Thanks!  I think committing your code in its current shape would be the
best way for everyone to collaborate on it as they have time/interest.
Since pcap-ng files are not seen in the wild, the code will only execute
when someone is coding for it.
Not long ago I added the possibility to add wiretap plug-ins, can this
be the candidate for the first checked-in file format plug-in?
Not really, as adding pcapng only makes real sense when the new pcapng functionality is used, which needs lot's of enhancements / changes in the wiretap API.
The current wiretap API directly reflects the libpcap file format 
limitations ...
Regards, ULFL