Comment # 6
on bug 12526
from Guy Harris
(In reply to Anthony Coddington from comment #4)
> (Heading off to meet somebody for dinner; I'll continue this in the next
> comment. Confirming, and classifying as an "enhancement", as the behavior
> might be wrong - and I'd say it is - but it's not as if we "intended"
> something else. Also raising the priority.)
Still thinking about it.
We want to preserve the ability of file and packet dissectors to run
pcap/pcapng file payload or rpcap/other remote capture protocol payload through
the standard dissector mechanism, so we don't want to have some stuff done
*only* by wiretap.
However, it might be nice if, for example, 802.11 packets from wiretap with
radio metadata always had "Wireshark generic radio metadata" even if the
metadata is part of the packet data - so that, for example, the pcap-common.c
code parsed the radiotap header and generated the "generic radio metadata" from
it - so that we could convert radiotap packets into packets for non-pcap/pcapng
file formats with different types of metadata, and convert those packets to
radiotap packets.
That would mean a radiotap packet would have both the "generic radio metadata"
and the radiotap header.
But file-pcap.c, file-pcapng.c, and dissectors for protocols such as rpcap
might then have to do the same stuff wiretap does.
You are receiving this mail because:
- You are watching all bug changes.