wireshark-dev October 2010 archive
Main Archive Page > Month Archives  > wireshark-dev archives
wireshark-dev: Re: [Wireshark-dev] How to add a wtap encapsulati

Re: [Wireshark-dev] How to add a wtap encapsulation?

From: Guy Harris <guy_at_nospam>
Date: Thu Oct 14 2010 - 17:59:29 GMT
To: Developer support list for Wireshark <wireshark-dev@wireshark.org>

On Oct 13, 2010, at 8:48 AM, Yo Mismo wrote:

> I haven't got #define WTAP_ENCAP_IEEE802_15_4_NOFCS 127 in wtap.h :(

You probably have an older version of Wireshark.

> I have been reading pcap-common.c, I haven't asked for a new DLT_ value because my dissector and the encapsulation are for academic purpose only and wont be used in future.

Then, if your captures are in pcap format, you should use one of the DLT_USERn values in the file, and use the corresponding WTAP_ENCAP_USERn encapsulation value in your dissector.
Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev