Re: [PATCH][RFC] Print interface name and direction

[Diego Woitasen <diegows () xtech com ar>]

On Wed, Dec 31, 2008 at 02:20:03PM -0800, Guy Harris wrote:
> On Dec 31, 2008, at 9:01 AM, Diego Woitasen wrote:
>
> >     These two patches apply against libpcap and tcpdump. They add
> >     the feature of print interface names, which is useful when you
> >     use "-i any" to detect weird network/routing problems.
> >     
> >     I added the switch -P if you want to use this feature.
> >     
> >     At the moment, it's supported only in Linux.
>
> ...and changes a data structure exported by libpcap (it adds stuff to  
> the end of the structure, so it *might* not completely break binary  
> compatibility, but...) *and* doesn't handle the case when you read  
> from a savefile (no, you can't add that information to the savefile  
> unless you do it with a new magic number - which would mean that  
> existing tcpdumps couldn't read the new files).
> -
> This is the tcpdump-workers list.
> Visit https://cod.sandelman.ca/ to unsubscribe.

This information isn't saved on pcap dumps because is not portable. May
be I can add this feature to dumps when we have pcap-ng implemented.

pcap_dump() copies some members of struct pcap_pkthdr before write it to
disk, so interface information is ignored.

-- 
-----------------------
Diego Woitasen - XTECH
www.xtech.com.ar
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.