Re: Proposed new pcap format

[Guy Harris <guy () alum mit edu>]

On Sat, Apr 10, 2004 at 04:39:41AM +1000, Darren Reed wrote:
> I'll agree that this, as part of the per-packet header, would be a useful
> addition to the pcap format.  No need for chained hashing, just per-record.

Part of the packet block header, or an option in the packet block?  I'd
vote for the latter.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.