Wireshark-dev: Re: [Wireshark-dev] Npcap 0.04 call for test
From: Yang Luo <[email protected]>
Date: Mon, 24 Aug 2015 09:38:10 +0800
Hi list,

In latest 0.04 r6 version, I have used 0x02, 0x00, 0x00, 0x00 for an IPv4 packet and 0x18, 0x00, 0x00, 0x00 for an IPv6 packet (tell me if you have better value for IPv6). The driver can return NdisMediumNull now for loopback interface. Wireshark seems to work now, one little issue is that in the "Characteristics" tab in loopback interface's "Interface Details", "Media supported" and "Medium in use" shows (0xffffffff) instead of a understandable string, this is because that the source code lacks the -1 to string mapping.

Latest installer is at:


On Sun, Aug 23, 2015 at 7:17 PM, Guy Harris <[email protected]> wrote:

On Aug 23, 2015, at 2:55 AM, Graham Bloice <[email protected]> wrote:

> As AF_INET6 is defined as 23 on the Windows platform:
> ws2def.h(109): #define AF_INET6        23              // Internetwork Version 6
>  Shouldn't code running on that platform, i.e. Wireshark use the appropriate value rather than faking that of another OS?

Only if we want to have to modify tcpdump/WinDump and Wireshark to handle that value.  It currently doesn't, as no platform that supports DLT_NULL uses it.
Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:[email protected]?subject=unsubscribe