tcpdump mailing list archives

Re: Is any work going on to improve the pcap format so we have have multuple link-types per capture?


From: Hannes Gredler <hannes () juniper net>
Date: Tue, 10 Jun 2003 20:30:32 +0200

On Tue, Jun 10, 2003 at 09:18:55AM -0700, Richard Sharpe wrote:

| #define DLT_VAR_LINKTYPE 0xFFFF
| /*
|  * And here is the pkt_hdr_var structure
|  * Note that after the linktype, everyting looks like a normal libpcap
|  * format pkthdr structure ...
|  */
| struct pcap_hdr_encap {
|   bpf_u_int32 linktype;
|   struct pcap_pkthdr hdr;
| }; 

richard,

what was the purpose of the COMMENT_DLT_ again ?

the DLT_VAR_LINKTYPE looks simple and hence great - 
not that anybody would care but you have got my voice ;-)

/hannes



-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: