Module extcap 

Wireshark extcap interface.

Wireshark discovers capture interfaces by running every executable in its extcap directory and asking each one what it offers. That makes umshctl appear in Wireshark’s interface list, so a live capture is a double-click rather than a file written in one window and opened in another.

Wireshark identifies itself by its arguments, not by the name it invokes us under, so nothing here depends on how the executable was installed. The vocabulary is kept out of the tool’s own argument parser: these flags belong to Wireshark, and the two would otherwise have to agree forever.

Modules

protocol

Rendering the extcap control protocol.

Structs

ExtcapArgs

The arguments Wireshark passes.

Silenced 🔒

Both standard streams pointed at /dev/null, with the originals restored when the value is dropped.

Constants

RELOAD_SCAN 🔒

How long a Reload in the configuration dialog spends scanning.

Functions

capture 🔒

Stream a live capture into the FIFO Wireshark is reading.

capture_args 🔒

Translate the dialog’s answers into the capture command’s own arguments, so both entry points run exactly the same capture.

duplicate 🔒

dup, as a descriptor that closes itself.

expect_interface 🔒

Reject an interface we did not advertise.

is_extcap_invocation

Whether Wireshark, rather than a person, is running this process.

point_at 🔒

Make target refer to whatever source refers to.

reload 🔒

Re-populate the radio dropdown from a fresh scan.

resolve_target 🔒

Pick the radio to capture from.

rf_override 🔒

Parse an RF override that the dialog leaves empty when unset.

run