Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Compiling with or without extcap

From: Anders Broman <anders.broman@xxxxxxxxxxxx>
Date: Thu, 4 Jan 2018 14:10:14 +0000

 

 

From: Wireshark-dev [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Dario Lombardo
Sent: den 4 januari 2018 13:41
To: Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
Subject: [Wireshark-dev] Compiling with or without extcap

 

During some reviews it went out again the point of compiling without pcap and without extcap. We've discussed a lot about pcap, but not that much about extcap.

Extcap is the feature to plug external modules, then it's not a core part, nor a mandatory feature. But it doesn't hurt: also without actual external modules, wireshark works perfectly fine with extcap support, doesn't it? Moreover it doesn't depend on any external library.

What about removing the conditional compilation for extcap? That would relieve the need for supporting another conditional compilation besides pcap. I'd like to hear some opinion, taking one side or another.

Cheers,

Dario.

 

Hi,

I don’t have a problem with making extcap a mandatory feature of Wireshark. But since extcap prolongs the startup time and clutters the interface list.

I would like a feature to turn some or all extcap interfaces off. I think it’s good to have them default available to make it obvious they exist but none of the default ones are particularly useful to me.

The SSH remote capture is potentially useful I suppose.

Just my 2 cents

Regards

Anders