Hi.
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Guy
> Harris
> Sent: Friday, November 02, 2001 09:21
> To: Fulvio Risso
> Cc: Gilbert Ramirez; tcpdump; [EMAIL PROTECTED]
> Subject: Re: [tcpdump-workers] Requesting new DLT value
>
>
> On Fri, Nov 02, 2001 at 08:50:05AM +0100, Fulvio Risso wrote:
> > I think this is a general requirement. We plan to insert a
> similar feature
> > (per-packet link types) in WinPcap as well.
>
> Would those be due to having packets from more than one interface in the
> file?
We already offer copy/paste capabilities into Analyzer. A user can copy
packets from a capture file and past them into another.
In the future, we would like to offer distributed capture (several machines
capture, and a single machine put all the packets together).
So, I believe that a different link-type on each packet will be the easiest
way to manage these requirements. This allows adding some packets to an
existing capture without modifying the file headers.
However, you proposal adds some new interesting stuff (interface names, ...)
and it should be fine as well.
In case you should decide for this proposal, I suggest to insert also some
counters (packets captured, packets dropped, ...) in the file header.
Cheers,
fulvio
> If so, we might want to add the stuff I mentioned in my previous mail,
> as the "any" device on Linux could use some of them (it doesn't need the
> per-packet link type, as the "any" device runs in cooked mode, but it
> could use the interface name).
> -
> This is the TCPDUMP workers list. It is archived at
> http://www.tcpdump.org/lists/workers/index.html
> To unsubscribe use
> mailto:[EMAIL PROTECTED]?body=unsubscribe
>
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
