Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Feeding data to Wireshark in real time

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 16 Mar 2010 23:48:16 -0700
On Mar 16, 2010, at 10:11 PM, Jaap Keuter wrote:

> That's called a pipe.

To give some more detail:

if the application writes a pcap file (complete with file header!) to a named pipe, you can have Wireshark or TShark capture from that named pipe, by giving the pathname of the named pipe as the name of the network interface on which to capture.