tcpdump mailing list archives
Re: -e vs. -x, revisited
From: Guy Harris <guy () netapp com>
Date: Wed, 18 Dec 2002 12:16:06 -0800
On Tue, Dec 17, 2002 at 03:39:15AM -0800, Guy Harris wrote:
Unless somebody comes up with a good reason *NOT* to make "-e" cause "-x" and "-X" to dump the link-layer header,
Actually, I can think of a reason why we might not want to to it - it might break scripts that parse the result of "tcpdump -e -x" *and* that expect the hex dump not to include the link-layer header. The "link-layer header isn't dumped" is documented going back at least as far as tcpdump 3.4: -x Print each packet (minus its link level header) in ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ hex. The smaller of the entire packet or snaplen bytes will be printed. so perhaps we should add a new command-line flag to handle that (or, along the lines of "-t" vs. "-tt" and "-v" vs. "-vv", have "-xx" and "-XX" cause the link-layer header to be printed). - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe
Current thread:
- Re: -e vs. -x, revisited, (continued)
- Re: -e vs. -x, revisited Andrew Brown (Dec 17)
- Re: Re: -e vs. -x, revisited Guy Harris (Dec 17)
- Re: Re: -e vs. -x, revisited Andrew Brown (Dec 17)
- Re: Re: -e vs. -x, revisited Guy Harris (Dec 18)
- Re: Re: -e vs. -x, revisited Andrew Brown (Dec 18)
- Re: Re: -e vs. -x, revisited Guy Harris (Dec 18)
- Re: Re: -e vs. -x, revisited Andrew Brown (Dec 18)
- Re: Re: -e vs. -x, revisited Guy Harris (Dec 18)
- Re: Re: -e vs. -x, revisited Michael Richardson (Dec 18)
- Re: Re: -e vs. -x, revisited Guy Harris (Dec 19)
- Re: -e vs. -x, revisited Guy Harris (Dec 18)
- Re: -e vs. -x, revisited Andrew Brown (Dec 18)
- Re: -e vs. -x, revisited Guy Harris (Dec 19)