tcpdump mailing list archives
Re: Proposed new pcap format
From: Hannes Gredler <hannes () juniper net>
Date: Wed, 14 Apr 2004 21:05:26 +0200
On Wed, Apr 14, 2004 at 08:25:25AM +0200, Fulvio Risso wrote: | I agree with Loris. | I know that this flag would be extremely useful, but there are no guarantees | that you're able to get this info from the NIC / NIC driver. | Perhaps, what we should to is to use 2 bits for each flag, where the first | one means "flag is valid", and the second one it is the flag value. | E.g.: | | 1 0 0 0 . . . . . . | ^^^ ^^^ ^^^ ^^^ | "incoming" flag packet is "outcoming" flag No meaning | is valid not "incoming" is NOT valid why not assigining simple codepoints for the direction information; i.e. 0 ... invalid/undefined/unsupported etc. 1 ... incoming 2 ... outgoing /hannes - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Current thread:
- Re: Proposed new pcap format, (continued)
- Re: Proposed new pcap format Ronnie Sahlberg (Apr 14)
- Re: Proposed new pcap format Jefferson Ogata (Apr 14)
- Re: Proposed new pcap format Fulvio Risso (Apr 14)
- Re: Proposed new pcap format Guy Harris (Apr 14)
- Re: Proposed new pcap format Fulvio Risso (Apr 13)
- Re: Proposed new pcap format Michael Richardson (Apr 16)
- Re: Proposed new pcap format Ronnie Sahlberg (Apr 11)
- Re: Proposed new pcap format Loris Degioanni (Apr 13)
- Re: Proposed new pcap format Fulvio Risso (Apr 13)
- Re: Proposed new pcap format Hannes Gredler (Apr 14)
- Re: Proposed new pcap format Fulvio Risso (Apr 14)
- Re: Proposed new pcap format Ronnie Sahlberg (Apr 11)
- Re: Proposed new pcap format Loris Degioanni (Apr 13)
- Re: Proposed new pcap format Fulvio Risso (Apr 13)
- Re: Proposed new pcap format Michael Richardson (Apr 16)
- Re: Proposed new pcap format Guy Harris (Apr 21)