While correct as an answer, the main Limitation here is dumpcap. You would have
to implement a mechanism to let dumpcap know which format to use for the
internal pipe to the extcap interrace. DLT could be that. Pcapng has been on
the wishlist for a very long time as a format
Kind regards
Rolan
On Sun, Mar 21, 2021 at 1:21 PM Martin Mathieson via Wireshark-dev
wrote:
> Can an extcap program write to a wiretap-supported file format other than
> pcap or pcapng? A quick test (hack to file preamble and frames in
> extcap_example.py) suggests not..
> Has it to do with synchronising whole f
Hi
Can an extcap program write to a wiretap-supported file format other than
pcap or pcapng? A quick test (hack to file preamble and frames in
extcap_example.py) suggests not..
Has it to do with synchronising whole frames being read at the wireshark
end of the pipe?
Regards,
Martin
__
