Ethereal-dev: Re: [Ethereal-dev] Re: capture IF tcp

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 01 Apr 2005 15:15:30 -0800
Pilz Rene wrote:
From the logical point of view it makes sense to put this functionality into libpcap. But in the next step it would be necessary to change the format aswell, because it is too weak. Something like ERF
is already better, but still not there where I want to be.

	http://www.tcpdump.org/pcap/pcap.html

The next release of libpcap probably won't write that, but I'd like to get code in that'll read it, or at least read the subset that the current libpcap API can handle (and just ignore the parts it can), so that the release after that can write it without writing files that no older release can read.

So I ask myself if it is still a good place to put it.

Yes, it is.