Ethereal-dev: Re: [Ethereal-dev] WTAP_ENCAP_PER_PACKET for PCAP files?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx>
Date: Wed, 29 Oct 2003 13:01:19 -0800 (PST)
On Wed, 29 Oct 2003, Guy Harris wrote:

> 
> On Oct 29, 2003, at 10:56 AM, Richard Sharpe wrote:
> 
> > Should we develop an RFC?
> 
> If by "RFC" you mean an Internet RFC, we should probably consider doing 
> that for libpcap-ng format; there's already one for snoop format 
> (although it's incomplete, as it doesn't describe atmsnoop format).

I mean this, eventually ...

> If you just mean a proposed format for developers of various packet 
> analysis programs (tcpdump, Ethereal, snort, Kismet, etc.) to review, 
> yes, we should do that, although the developers of those programs 
> interested in libpcap-ng should probably be part of the group designing 
> the format.  (I have some mail from a while ago discussing this with 
> some people, including, I think, Mike Kershaw of Kismet fame; I'll dig 
> it up.)

I mean this too. However, we should go for an Internet Draft RFC and 
then, hopefully, an RFC.

Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com