Move the version number checking for libpcap files, to see whether to

swap the "captured length" and "length" fields, to the open-file code;
store a tri-state (definitely swapped, definitely not swapped, maybe
swapped) value in the per-capture-file-format information for libpcap
format, and use that when processing packets.


git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8774 f5534014-38df-0310-8fa8-9805f1628bb7

1 files changed, 8 insertions, 1 deletions

diff --git a/wiretap/wtap-int.h b/wiretap/wtap-int.h
index 47b594cd24..2cba9c08eb 100644
--- a/wiretap/wtap-int.h
+++ b/wiretap/wtap-int.h
@@ -1,6 +1,6 @@
 /* wtap-int.h
  *
- * $Id: wtap-int.h,v 1.40 2003/10/01 07:11:49 guy Exp $
+ * $Id: wtap-int.h,v 1.41 2003/10/24 23:55:34 guy Exp $
  *
  * Wiretap Library
  * Copyright (c) 1998 by Gilbert Ramirez <gram@alumni.rice.edu>
@@ -77,8 +77,15 @@ typedef struct {
 	time_t	start;
 } lanalyzer_t;
 
+typedef enum {
+	NOT_SWAPPED,
+	SWAPPED,
+	MAYBE_SWAPPED
+} swapped_type_t;
+
 typedef struct {
 	gboolean byte_swapped;
+	swapped_type_t lengths_swapped;
 	guint16	version_major;
 	guint16	version_minor;
 } libpcap_t;