Wireshark-users: Re: [Wireshark-users] [HELP] How to send bytes to wireshark on runtime
On Thu, Aug 6, 2009 at 6:48 PM, Guy Harris<[email protected]> wrote:
> It's a bit non-obvious. but if you want Wireshark to start capturing
> immediately, you have to specify the "-k" flag as well:
>        wireshark -i /full/path/to/fifo.pcap -k

The -k works like a charm, thanks.

>> Is there a way to do this?
> Write the code in C, instead, and add it to libpcap; then either

Maybe we'll try this sometime. I'm not sure how rich the pcap
interface is, there is some information, such as channel to listen on,
that needs to be known in order to capture.