Re: [Wireshark-dev] usbmon: size of different fields?

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: Guy Harris
Date: Tuesday, November 9, 2010 - 2:23 pm

On Nov 9, 2010, at 12:05 PM, Németh Márton wrote:


...and tcpdump.  Support for capturing on USB on Linux has been in libpcap since at least libpcap 1.0.

When reading a pcap file, or a pcap-ng file section, written on a machine with a byte order opposite from that of the machine reading the file, libpcap and Wireshark's Wiretap library byte-swap most host-byte-order fields into the byte order of the host reading the file; the exceptions are the iso_rec structure and the isochronous descriptors.
--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
usbmon: size of different fields?, Németh Márton, (Mon Nov 8, 11:40 pm)
Re: usbmon: size of different fields?, Pete Zaitcev, (Tue Nov 9, 7:50 am)
Re: usbmon: size of different fields?, Németh Márton, (Tue Nov 9, 1:05 pm)
Re: [Wireshark-dev] usbmon: size of different fields?, Guy Harris, (Tue Nov 9, 2:23 pm)
Re: usbmon: size of different fields?, Pete Zaitcev, (Wed Nov 10, 8:21 am)
Re: usbmon: size of different fields?, Guy Harris, (Wed Nov 10, 10:36 am)