[Wireshark-dev] Capture filter

Hi All, I have a quick question on capture filter. I use named pipe to pass the packets to tshark. With a capture filter, I tried to (a) store packets, (b) display and (c) store and display the packets. $ tshark -i pipe_to_tshark -w test.pcap -f 'udp port 1900' $ tshark -i pipe_to_tshark -S -f '

Re: [Wireshark-dev] Capture filter

Hi All, Reposting since it doesn't seem to have reached. Sorry if it is a repeat. Regards dharani On Thu, Sep 15, 2011 at 3:25 PM, Tharaneedharan Vilwanathan wrote: > Hi All, > > I have a quick question on capture filter. > > I use named pipe to pass the packets to ts

[Wireshark-dev] Building pruned-down version of tshark

Hi All, I am new to wireshark development and this mailing list. I am porting wireshark to an embedded platform. I managed to cross-compile wireshark (tshark, mainly) and run it on the 32-bit PowerPC target. However, the executables and shared libraries take about 80MB. Please see the file sizes

Re: [Wireshark-dev] Building pruned-down version of tshark

Hi Christopher/Guy, Thanks for the quick response. Let me give it a try. Regards dharani On Mon, Oct 25, 2010 at 12:18 PM, Christopher Maynard < chris.mayn...@gtech.com> wrote: > Tharaneedharan Vilwanathan writes: > > > I am trying to reduce the size. I would like to explore

[Wireshark-dev] Packet Storage

Hi All, I have a quick question. The .pcap format allows the packets to be of the same ethernet type, right? If so, what is the best way to store the packets of different ethernet types in a file? Sorry if this is a common question and/or this has been asked already. Any help appreciated. Than

Re: [Wireshark-dev] Packet Storage

Hi All, Sorry for the delay. I meant 'link-layer header' only. Thanks for the details. Let me go through the format. Regards dharani On Tue, Mar 8, 2011 at 8:31 AM, Guy Harris wrote: > > On Mar 8, 2011, at 6:58 AM, Jeff Morriss wrote: > >> Different file types allow different things.  PCAP fil

[Wireshark-dev] Wireshark License

Hi All, I have a very quick question about Wireshark License. Is it GPLv2 or GPLv3? From the information I collected from webpages, it looks like it is up to the user to choose GPLv2 or GPLv3. Can someone confirm this? Appreciate any help. Thanks dharani

Re: [Wireshark-dev] Wireshark License

Hi Jakub, Thanks for the info. Regards dharani On Wed, Jun 8, 2011 at 3:00 AM, Jakub Zawadzki wrote: > On Tue, Jun 07, 2011 at 05:40:30PM -0700, Tharaneedharan Vilwanathan wrote: > > I have a very quick question about Wireshark License. > > > > Is it GPLv2 or GPLv3? F