How can we bypass the network interface card detection in Interface list in wireshark source code

Question

Hi,

I want to bypass the interface list in Capture option in wireshark gui,where can i do that in wireshark source code 1.12.6 release.ie i didn't keep any ethernet cable to my pc even i uninstalled the network adapter and i tried to open wireshark Capture and then by clicking on Interfaces.. icon i am getting "There are no interfaces on which a capture can be done" message is popping.where i can bypass this thing so that i can start capturing and see my own packet which was already hardcoded in winpcap driver(which was working fine even though ethernet cable is not connected).

Thanks, Karun.

Answer 1

Simply grep for that string in the source. For current dev master I came up with:

capture_opts.c(475): cmdarg_err("There are no interfaces on which a capture can be done");
dumpcap.c(1540): cmdarg_err("There are no interfaces on which a capture can be done");
dumpcap.c(1577): cmdarg_err("There are no interfaces on which a capture can be done");
dumpcap.c(4904): cmdarg_err("There are no interfaces on which a capture can be done");
tshark.c(1428): cmdarg_err("There are no interfaces on which a capture can be done");
wireshark-qt.cpp(636): cmdarg_err("There are no interfaces on which a capture can be done");
ui\gtk\capture_if_dlg.c(637): simple_error_message_box("There are no interfaces on which a capture can be done.");
ui\gtk\main.c(2355): cmdarg_err("There are no interfaces on which a capture can be done");

but 1.12.6 is likely to be a little different in the number of places. Basically the code calls capture_interface_list() and if that returns NULL without an error then the error message is displayed.