Wireshark mailing list archives

Re: Bit for starting / stopping / new Capture


From: Pascal Quantin <pascal.quantin () gmail com>
Date: Wed, 17 Feb 2016 19:52:38 +0100

2016-02-17 19:38 GMT+01:00 Paul Offord <Paul.Offord () advance7 com>:

There’s an enhancement to plugin_if that doesn’t address your needs
directly but may give you enough functionality.  It’s a function called
plugin_if_get_ws_info.  You can call it from within a dissector and it
populates the following structure:



typedef struct _ws_info_t

{

    gboolean ws_info_supported;                 /* false if no libpcap */

    file_state cf_state;                        /* Current state of
capture file */

    gchar *cf_filename;                         /* Name of capture file */

    guint32 cf_count;                           /* Total number of frames
*/

    guint32 cf_framenr;                         /**< Currently displayed
frame number */

    gboolean frame_passed_dfilter;              /**< true = display, false
= no display */

} ws_info_t;



You may be able to interpret the cf_filename and cf_state values to give
you what you need.



The plugin_if_get_ws_info code has been accepted and merged but it’s not
in 2.0.1.  It’s in the latest git pull and I guess will be in 2.0.2.


No it will not be part of Wireshark 2.0.2 as it was not merged in the
stable tree (only bugfixes are merged in the stable branch).
It is part of Wireshark 2.1.0 development tree that will become at some
point Wireshark 2.2.0 stable release.

Best regards,
Pascal.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: