Is any work going on to improve the pcap format so we have have multuple link-types per capture?

[Richard Sharpe <rsharpe () richardsharpe com>]

Hi,

For a number of reasons it would be useful to have a capture file format 
that includes multiple link-type records. This does not seem to be allowed 
by the current pcap format.

Some of the reasons include:

  - Being able to include packets from many interfaces in the one capture
    file

  - Being able to include information records in the capture file,
    for pedagogic or other reasons.

Is it possible to define a new pcap version that includes a linktype field 
in the header of each packet?
 
Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe