Wireshark-dev: Re: [Wireshark-dev] Using Wireshark packet parsers and pretty printers
From: Richard Sharpe <[email protected]>
Date: Mon, 9 Mar 2009 15:40:07 -0800
On Mon, Mar 9, 2009 at 3:34 PM, Ulisses Araújo Costa
<[email protected]> wrote:
> I Just want to know what is the function with that I can read a
> tcpdump file and return the structure of a packet...

The problem is, that is not the way Ethereal works. There is never a
structure carried around that contains the packet as a set of broken
down fields, protocol by protocol.

Richard Sharpe