Re: Is any work going on to improve the pcap format so we have have multuple link-types per capture?

[Hannes Gredler <hannes () juniper net>]

i'd rather propose a new DLT type that encapulates those frames;

/hannes

On Sun, Jun 08, 2003 at 12:29:31AM -0700, Richard Sharpe wrote:
| Hi,
| 
| For a number of reasons it would be useful to have a capture file format 
| that includes multiple link-type records. This does not seem to be allowed 
| by the current pcap format.
| 
| Some of the reasons include:
| 
|   - Being able to include packets from many interfaces in the one capture
|     file
| 
|   - Being able to include information records in the capture file,
|     for pedagogic or other reasons.
| 
| Is it possible to define a new pcap version that includes a linktype field 
| in the header of each packet?
|  
| Regards
| -----
| Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
| sharpe[at]ethereal.com, http://www.richardsharpe.com
| 
| -
| This is the TCPDUMP workers list. It is archived at
| http://www.tcpdump.org/lists/workers/index.html
| To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe