Re: proposed new pcap format

[Michael Richardson <mcr () sandelman ottawa on ca>]

-----BEGIN PGP SIGNED MESSAGE-----


> > > > > "Darren" == Darren Reed <darrenr () reed wattle id au> writes:
    >> Are we sure that enough people will be asking for data types that we 
    >> can't just say "ask us for a type value, we'll give one to you"?  That 
    >> seems to have worked pretty well for DLT_ values so far.  If they 
    >> *truly* want it to be private, they can just ask for a number and we'll 
    >> give it to them, just as we give out private-use DLT_ values such as 
    >> the ones used by Cisco, Juniper, and IBM.

    Darren> I suppose I'm not so much concerned about it being "private" as it
    Darren> being unique.

    Darren> Maybe a vendor field and vendor sub-type field would be useful ?
    Darren> That'd give flexibility in an SNMP kind of way.

  okay, divide the 32-bit space into two 16-bit spaces.
  vendor 0 will be reserved.
  tcpdump.org will be vendor 1.

  vendor 0xffff will be reserved (for the NSA).

- --
]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr () xelerance com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQGIIp4qHRg3pndX9AQFgxAP8D3oQ/FtEYSKZwA2PBoMefN7CTCtcFFJD
wxNt+4G9DVplh8mR+OEhDnQqBULSXfNt+d02dWWx8G6Bk6KaqMNJRWEPYHEQaj/O
XANJj5Z1afLIrXsCovfSnw8wVBFCmwdUZ+p7zlOItNmhXEBb0jK9ZW1YVGgG6sIo
o+jrE5ngqBs=
=XNnM
-----END PGP SIGNATURE-----
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe