On Thu, Mar 08, 2001 at 12:32:29AM -0800, Guy Harris wrote:
> So would it ever be the case that BIOCGDLT would return one of the
> DLT_RAWAF() values? If so, in addition to providing platform-independent
> linktype field values for various AF_xxx values, we'd also have to make
> tcpdump dissect them....
Actually, my thinking on this was "yes". In my packet classification
engine, it's possible to log packets out to userland, and I want to use
the pcap save file format so that tcpdump can be used to dump the logs.
I'm still working out what extensions I'd like to see added to the
save file (and to the record sent down from BPF), so that's why I
haven't brought it up here, yet.
I suppose tcpdump currently deals with DLT_RAW?
--
-- Jason R. Thorpe <[EMAIL PROTECTED]>
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
