tcpdump mailing list archives

Re: [AiG-CERT #104737] DLT value


From: Guy Harris via tcpdump-workers <tcpdump-workers () lists tcpdump org>
Date: Fri, 29 May 2020 10:07:56 -0700

--- Begin Message --- From: Guy Harris <gharris () sonic net>
Date: Fri, 29 May 2020 10:07:56 -0700
On May 29, 2020, at 3:23 AM, Airbus CERT via tcpdump-workers <tcpdump-workers () lists tcpdump org> wrote:

I would like to request you to get a DTL value for the PR https://github.com/the-tcpdump-group/libpcap/pull/934. 
This PR intend to add ETW capture for libpcap.

So is each packet an Event Tracing for Windows:

        https://docs.microsoft.com/en-us/windows/win32/etw/event-tracing-portal

record of some sort?  If so, where is the format of that record defined?

--- End Message ---
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Current thread: