Wireshark · Wireshark-dev: Re: [Wireshark-dev] Live wireshark capture packets from my windows filter driver

[Roland Knall <rknall@xxxxxxxxx>]

Hi

One possibility would be an extcap device. See README.extcap in the doc subdirectory for more details.

regards

On Sat, Nov 12, 2016 at 3:35 AM, Ashok Nandoori <anandoori@xxxxxxxxx> wrote:

Hi,

Can you send me some pointers on how to write plug-in to wireshark to capture live packets from my windows filter driver.

Basically my filter driver encrypts the packets, so wireshark can only see encrypted packets. For debug-ability if I want to write a plug-in to wireshark to capture packets from my driver, how to do it?

Thanks,
Ashok

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe