tcpdump mailing list archives

Re: New RFCs for 1) pcap file format and 2) rpcapd protocol?


From: Guy Harris via tcpdump-workers <tcpdump-workers () lists tcpdump org>
Date: Thu, 26 Mar 2020 22:19:49 -0400 (EDT)

--- Begin Message --- From: Guy Harris <gharris () sonic net>
Date: Thu, 26 Mar 2020 19:20:58 -0700
On Mar 26, 2020, at 7:10 PM, Guy Harris via tcpdump-workers <tcpdump-workers () lists tcpdump org> wrote:

(Note that its purpose is to document the *existing* format, rather than be a source of proposed changes.)

...proposed changes to the format.

I am, however, planning on proposing a mechanism for vendor-specific "custom" link-layer types, inspired by the pcapng 
"custom" block types and option types, for use in both pcap and pcapng.  That'll be in a separate message.

As with pcapng block types and options, anything of *general* use that a vendor would like multiple programs to be able 
to handle should probably be proposed as a part of the standard, with a register link-layer type/block number/option 
number.

--- End Message ---
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Current thread: