Wireshark mailing list archives
Re: Devices in tshark versus dumpcap
From: Gisle Vanem <gisle.vanem () gmail com>
Date: Sun, 30 Apr 2017 11:27:16 +0200
Graham Bloice wrote:
Which branch though, master or master-2.2?
'master' it seems. But I tried to resolve the issue myself.
First by trying w/o HAVE_EXTCAP (to exclude any problems with that). But
that is impossible. E.g.:
capture_sync.c(521): error C2039: 'extcap_fifo': is not a member of 'interface_options_tag'
etc. etc.
The is for sure a problem in how lines of text are generated in dumpcap.exe
and how tshark is interpreting them. I'm not even sure the lines have
"\r\n" terminations since from dumpcap.c:
#ifdef _WIN32
/* set output pipe to binary mode, to avoid ugly text conversions */
_setmode(2, O_BINARY);
And in capchild/capture_ifinfo.c:
raw_list = g_strsplit(data, "\r\n", 0);
Can you (or someone else) send the output of:
tshark.exe -o console.log.level:252 -D
So I can guess what's wrong here?
--
--gv
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives: https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Devices in tshark versus dumpcap Gisle Vanem (Apr 29)
- Re: Devices in tshark versus dumpcap Graham Bloice (Apr 29)
- Re: Devices in tshark versus dumpcap Gisle Vanem (Apr 29)
- Re: Devices in tshark versus dumpcap Graham Bloice (Apr 29)
- Re: Devices in tshark versus dumpcap Gisle Vanem (Apr 30)
- Re: Devices in tshark versus dumpcap Gisle Vanem (Apr 30)
- Re: Devices in tshark versus dumpcap Gisle Vanem (Apr 30)
- Re: Devices in tshark versus dumpcap Gisle Vanem (Apr 29)
- Re: Devices in tshark versus dumpcap Graham Bloice (Apr 29)
- <Possible follow-ups>
- Devices in tshark versus dumpcap Gisle Vanem (Apr 29)
