Re: proposed new pcap format

[Michael Richardson <mcr () sandelman ottawa on ca>]

-----BEGIN PGP SIGNED MESSAGE-----


> > > > > "Hannes" == Hannes Gredler <hannes () juniper net> writes:
    Hannes> | ...with that list presumably being expandable over time.

    Hannes> like for example with PCAP_DIRECTION ....

okay, but there is more than just in/out. 

enum pcap1_probe {
        INBOUND  =1,
        OUTBOUND =2,
        FORWARD  =3,
        PREENCAP =4,          /* IPsec ? */
        POSTDECAP=5,
};

struct pcap1_info_probe {
        struct pcap1_info_container pic;
        bpf_u_int32                 probeloc;   /* enum pcap1_probe */
};
        
Maybe this interacts too much with ifIndex?

- --
]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr () xelerance com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQGGkbYqHRg3pndX9AQGx0wP/UHV4cpFwLDr4/L51s9b95h544CNYBqNS
W8TlQTq98oOHkRE1j3iYtglatmoJgA1lhIvKjG+34tKDm/b6FiKq+p063NIe7JlC
Ob7POW8mow8u28VMJujP/ZYzT30gvFkQgP8N2YjinxECkeI/6gRMRrYxU31lY/wa
k5uZibjTBF8=
=kM2y
-----END PGP SIGNATURE-----
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe