The pcap library collects the data from the operating system. That
gets passed to wireshark and the tvb is created.
--gilbert
On 6/9/08, Amit Paliwal <Amit.Paliwal@xxxxxxxxxxxxxxx> wrote:
>
> I know that in wireshark when a farme is selected the top level dissector is
> called like ethernet which in turn calls other dissectors. But I really want
> to know where is this buffer tvb constructed for the first time which is
> than passed to subsequent dissectors. Is it constructed from the raw data
> received on the network card.
>
> ______________________________________________________________________
>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> https://wireshark.org/mailman/listinfo/wireshark-dev
>
>