[tcpdump-workers] "Custom" link-layer types for pcap and pcapng

2020-03-26 Thread Guy Harris via tcpdump-workers
--- Begin Message --- Here's the proposal for "custom" link-layer types I threatened^Wpromised in my earlier email. A link-layer type value of 0x will be reserved as LINKTYPE_CUSTOM, with libpcap offering a DLT_CUSTOM. A custom link-layer type has a 32-bit IANA-registered Private Enterprise

Re: [tcpdump-workers] New RFCs for 1) pcap file format and 2) rpcapd protocol?

2020-03-26 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Mar 26, 2020, at 7:10 PM, Guy Harris via tcpdump-workers wrote: > (Note that its purpose is to document the *existing* format, rather than be a > source of proposed changes.) ...proposed changes to the format. I am, however, planning on proposing a mechanism for vendo

Re: [tcpdump-workers] New RFCs for 1) pcap file format and 2) rpcapd protocol?

2020-03-26 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Mar 22, 2020, at 10:29 AM, Guy Harris via tcpdump-workers wrote: > 5) ... and put pcap under the pcapng team as per the same reason as 4). Done. It's pointed to by https://github.com/pcapng/pcapng and the XML source is at https://github.com/pcapng/p

[tcpdump-workers] Intro Lesson Plan/Tutorial

2020-03-26 Thread Plotnick, Neil via tcpdump-workers
--- Begin Message --- I have posted a tutorial designed for my introductory cybersecurity class at my high school. Any observations and suggestions are welcome. https://github.com/nplotnick/cyber/blob/master/TCPDump%20Tutorial.pdf -- Neil Plotnick Everett High School 100 Elm Street Everett MA 02