wireshark/wiretap/wtap.def
Guy Harris 8f0aa18626 Have a pseudo-header for Ethernet packets, giving the size of the FCS -
0 means "there is no FCS in the packet data", 4 means "there is an FCS
in the packet data", -1 means "I don't know whether there's an FCS in
the packet data, guess based on the packet size".

Assume that Ethernet encapsulated inside other protocols has no FCS, by
having the "eth" dissector assume that (and not check for an Ethernet
pseudo-header).

Have "ethertype()" take an argument giving the FCS size; pass 0 when
appropriate.

Fix up Wiretap routines to set the pseudo-header.  This means we no
longer use the "generic" seek-and-read routine, so get rid of it.

svn path=/trunk/; revision=8578
2003-10-01 18:19:16 +00:00

33 lines
608 B
Modula-2

EXPORTS
wtap_buf_ptr
wtap_close
wtap_dump
wtap_dump_can_open
wtap_dump_can_write_encap
wtap_dump_close
wtap_dump_fdopen
wtap_dump_file
wtap_dump_open
wtap_encap_short_string
wtap_encap_string
wtap_fd
wtap_file_encap
wtap_file_type
wtap_file_type_short_string
wtap_file_type_string
wtap_get_bytes_dumped
wtap_set_bytes_dumped
wtap_loop
wtap_open_offline
wtap_pcap_encap_to_wtap_encap
wtap_phdr
wtap_process_pcap_packet
wtap_pseudoheader
wtap_read
wtap_seek_read
wtap_sequential_close
wtap_short_string_to_encap
wtap_short_string_to_file_type
wtap_snapshot_length
wtap_strerror