On Thu, Dec 11, 2008 at 01:14:24PM -0800, Guy Harris wrote: > > On Dec 11, 2008, at 12:26 PM, Michael Richardson wrote: > > > application/pcap-capture [...] > 3) not all pcap-format files are written by libpcap.
...but libpcap may be considered to supply the authoritative definition of the format? > Is "-capture" necessary, though? Would you suggest just "pcap"? I'm afraid that's not enough information for someone who sees the type name for the first time to guess what it's for. Maybe "pcap-savefile" -- that's the name you gave to the manpage. I'm not strongly attached to my suggestion: I'm perfectly fine with Michael's proposal (application/pcap-capture) or whatever else if it is the consensus. -Phil - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
