Re: [tcpdump-workers] bpf/pcap performance

2004-04-13 Thread Darren Reed
In some email I received from Guy Harris, sie wrote: On Apr 12, 2004, at 4:43 PM, Darren Reed wrote: The problem with pcap_next_ex() is the man page description: reads the next packet and returns a success/failure indication Well, it says more than that - it indicates what the values

Re: [tcpdump-workers] Proposed new pcap format

2004-04-13 Thread Loris Degioanni
Michael, -BEGIN PGP SIGNED MESSAGE- Loris == Loris Degioanni [EMAIL PROTECTED] writes: Loris It depends on what our scribe means: I'll be around the Loris world during the next month, and I'll not be able to work Loris regularly on the document. Moreover, I'll like to

Re: [tcpdump-workers] Proposed new pcap format

2004-04-13 Thread Darren Reed
In some email I received from Loris Degioanni, sie wrote: Today, some people might want MD-5, others SHA-1 and in the future, there may be other hashing algorithms that are better to use. And there are times when we might want it off (algorithm 0, for example.) As such, I believe this

Re: [tcpdump-workers] Proposed new pcap format

2004-04-13 Thread Christian Kreibich
On Tue, 2004-04-13 at 16:09, Jefferson Ogata wrote: Something keeps bugging me, and I just want to throw it out there for the mad dogs to tear into little bloody pieces: Given all the desirable options people are looking for in this, and the need for future growth, I think we should