Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] converting pcapng to pcap

From: albert <alo@xxxxxxxxxxxxxx>
Date: Fri, 28 Sep 2012 21:01:23 +0000 (UTC)
Guy Harris <guy@...> writes:
> 
> 
> So:
> 
> 	if the callback *is* pcap_dump() (whose API was designed to allow it to 
act as a callback for pcap_loop() or
> pcap_dispatch()), only half of the format-conversion work is done in the 
callback;
> 
> 	if the callback isn't pcap_dump(), just some routine that calls 
pcap_dump(), none of the
> format-conversion work is done in the callback.
> 
> 

Thanks again for your response.
What/where is/are the function(s) that determine(s) whether the callback for 
next_packet_op is going to be pcap_dump() or some other higher level routine  ?  
Is this a function that the user must supply ?


thx.
Cheers,
Albert