How to use extcap with pipes?

retag add tags

Currently, I have a Python script that creates a pipe and displays the captured packet on Wireshark GUI. However, it works only once and when tried to write more packets to the pipe, I get the "All pipe instances are busy " error. As suggested earlier, I looked up the extcap interface. In the following extcap_example.py is the Python script, but, what is the Python interpreter?

To use this script on Windows, please generate an extcap_example.bat inside the extcap folder, with the following content:
@echo off
<Path to python interpreter> <Path to script file> %*

Also, should I build the Wireshark source code after adding the batch file in the folder and make any changes in the makefiles? (as suggested in the last part of this link : https://jelmer.uk/klaus/wireshark/blo... )

The "python interpreter" is the python interpreter binary, i.e. python.exe, or more appropriately on Windows, pythonw.exe. The latter doesn't start a terminal window. Note that it would be best to provide the the full path to the interpreter, otherwise you'll be relying on the interpreter being added to your system or user path.

Not sure why you provide a link to an out of date third party copy of the Wireshark codebase, the project's own git repository can be accessed here which is easily found from the Wireshark website -> Develop -> Browse the Code.

The current documentation for extcap is the manpage, and the example.

If your extcap is built using C, you'll need to obtain the Wireshark source code for the appropriate headers and ensure the required libraries have been built\downloaded to allow the extcap binary to be built. If using Python for the extcap, then no recompilation should be needed.

23.8k

grahamb

answered 2019-06-02 15:21:48 +0000

edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

How to use extcap with pipes? edit

Comments

1 Answer

Comments