diff options
| author | Michael Mann <mmann78@netscape.net> | 2017-09-04 10:16:49 -0400 |
|---|---|---|
| committer | Michael Mann <mmann78@netscape.net> | 2017-09-04 18:41:46 +0000 |
| commit | a2b084f6c507d96fe6f0776154537268d60e9428 (patch) | |
| tree | 8638abf6329ce8f297ebff9b12e49cea0b462fdf /wiretap/wtap.h | |
| parent | 9f1c73edac06821987760e03f103c49bb9588d1f (diff) | |
Add support for WPFCapture "formats" from Microsoft Analyzer.
Normally a .cap file contains a network type that when masked with 0xFFF
will convert to a pcap LINKTYPE_ value. However, Microsoft Analyzer
used 0xE080-0xE08A for their own purposes within a .cap file.
Add support for the WPFCapture formats and give a "not supported" error
message to the few left unsupported.
Bug: 10556
Change-Id: I321a75ce769fdec75bdc6b595936c25932950a97
Reviewed-on: https://code.wireshark.org/review/23386
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
Diffstat (limited to 'wiretap/wtap.h')
| -rw-r--r-- | wiretap/wtap.h | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/wiretap/wtap.h b/wiretap/wtap.h index 77a0205aa6..ff3d5dd816 100644 --- a/wiretap/wtap.h +++ b/wiretap/wtap.h @@ -278,6 +278,13 @@ extern "C" { #define WTAP_ENCAP_NETMON_HEADER 188 #define WTAP_ENCAP_NETMON_NET_FILTER 189 #define WTAP_ENCAP_NETMON_NETWORK_INFO_EX 190 +#define WTAP_ENCAP_MA_WFP_CAPTURE_V4 191 +#define WTAP_ENCAP_MA_WFP_CAPTURE_V6 192 +#define WTAP_ENCAP_MA_WFP_CAPTURE_2V4 193 +#define WTAP_ENCAP_MA_WFP_CAPTURE_2V6 194 +#define WTAP_ENCAP_MA_WFP_CAPTURE_AUTH_V4 195 +#define WTAP_ENCAP_MA_WFP_CAPTURE_AUTH_V6 196 + /* After adding new item here, please also add new item to encap_table_base array */ #define WTAP_NUM_ENCAP_TYPES wtap_get_num_encap_types() |