On Sep 19, 2006, at 6:02 AM, abeni wrote: > I'm trying to plug USB sniffing support into wireshark, at least under > Linux. I have some working code (the attached patch, against revision > 19257), but is quite intrusive, it uses the usbmon infrastructure and > works only on with recent Linux kernels (I think 2.6.8 or newer is > needed). > > The patch build up a generic 'virtual' API for sniffing that is > 'hardware agnostic'.
Why would such an API belong in Wireshark rather in libpcap? (No, libpcap/WinPcap is not a library intended only for Ethernet, or even only for "real" networks; it already has code for IrDA on Linux, for example. In addition, it's not intended only for devices using the OS's "standard" network sniffing mechanism.) Putting the API in libpcap allows programs *other* than Wireshark to use it. In addition, libpcap's purpose is to hide platform-specific details from programs wanting to do capture, so the fact that your patch happens to be Linux-specific isn't an issue - libpcap has plenty of platform-dependent code already (such as all the pcap-*.c and fad- *.c files). _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
