Luis EG Ontanon schrieb:
On Jan 11, 2008 3:26 AM, Stephen Fisher <stephentfisher@xxxxxxxxx> wrote:
On Fri, Jan 11, 2008 at 03:03:13AM +0100, Ulf Lamping wrote:
I have a running *prototype*, which can read simple pcap-ng files.
I've written down some basic information about it, please have a look
at: http://wiki.wireshark.org/Development/PcapNg
Thanks! I think committing your code in its current shape would be the
best way for everyone to collaborate on it as they have time/interest.
Since pcap-ng files are not seen in the wild, the code will only execute
when someone is coding for it.
Not long ago I added the possibility to add wiretap plug-ins, can this
be the candidate for the first checked-in file format plug-in?
Not really, as adding pcapng only makes real sense when the new pcapng
functionality is used, which needs lot's of enhancements / changes in
the wiretap API.
The current wiretap API directly reflects the libpcap file format
limitations ...
Regards, ULFL
