Re: What must be the linktype set to in Pcap if the the packets are to be captured from the unix socket

[<santosh.soule () wipro com>]

Thanks Harris, I will use those


-----Original Message-----
From: tcpdump-workers-owner () lists tcpdump org
[mailto:tcpdump-workers-owner () lists tcpdump org] On Behalf Of Guy Harris
Sent: Wednesday, April 26, 2006 3:28 AM
To: tcpdump-workers () lists tcpdump org
Subject: Re: [tcpdump-workers] What must be the linktype set to in Pcap
if the the packets are to be captured from the unix socket


On Apr 24, 2006, at 10:44 PM, santosh.soule () wipro com wrote:

> So I want to add support for unix socket to Pcap library. As pcap uses

> DLT_xxx for identifying the type of interface and Linux uses the ARP
> hardware type.
> In case of unix socket what value should be given, is there any value
> already defined.

No, there isn't.

Given that this will be some special protocol of your own running on the
UNIX-domain sockets, I would suggest that you use one of the user-
defined DLT_ values (DLT_USER0 through DLT_USER15), and make your own
private modifications to tcpdump, or whatever program you're using to
read those files, to handle that DLT_ value.  Those DLT_ values are
reserved for private use; they will never be used for any official
purpose in libpcap or tcpdump.
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.


The information contained in this electronic message and any attachments to this message are intended for the exclusive 
use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the 
intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately 
and destroy all copies of this message and any attachments.

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for 
the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.

www.wipro.com
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.