Wireshark-dev: Re: [Wireshark-dev] tvb buffer
From: "Gilbert Ramirez" <[email protected]>
Date: Mon, 9 Jun 2008 10:58:54 +0530
The pcap library collects the data from the operating system. That
gets passed to wireshark and the tvb is created.

--gilbert

On 6/9/08, Amit Paliwal <[email protected]> wrote:
>
> I know that in wireshark when a farme is selected the top level dissector is
> called like ethernet which in turn calls other dissectors. But I really want
> to know where is this buffer tvb constructed for the first time which is
> than passed to subsequent dissectors. Is it constructed from the raw data
> received on the network card.
>
> ______________________________________________________________________
>
> _______________________________________________
>  Wireshark-dev mailing list
>  [email protected]
>  https://wireshark.org/mailman/listinfo/wireshark-dev
>
>