Re: proposed new pcap format

[Richard Sharpe <rsharpe () richardsharpe com>]

Hi,

One of the items I would like support for in a new format is comments. 
That is, the ability to add textual comments to frames. These comments 
would be ignored by tools that do not understand them, but they would be 
displayed by tools capable of understanding them.

It seems that there are two ways to deal with this:

1. A packet type that indicates that the data contained in the packet is a 
comment associated with the previous (or next) packet in the capture.

2. Some extra fields in each capture header that allows us to tag the 
current packet with comment info.

Regards
-----
Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe