Wireshark-users: Re: [Wireshark-users] wireshark-1.0.0

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 29 May 2008 10:36:29 -0700
Moheed Moheed Ahmad wrote:

Is it must for 1.0.0 to have dumpcap built in order to tshark work?

Yes, if you want to capture network traffic; both Wireshark and TShark run dumpcap to do the capturing (so the process doing the capturing, which might have to run with special privileges, doesn't do any dissection, so a bug in a dissector won't cause problems in a privileged process).