Re: Request for a DLT value (for nflog)

[Guy Harris <guy () alum mit edu>]

On Jun 20, 2011, at 3:21 AM, Jakub Zawadzki wrote:

> DLT_NFLOG starts with struct nfgenmsg header defined in <linux/netfilter/nfnetlink.h>,
> which looks like (changed to stdint.h types + my comments in /** **/):

        ...

> Known types are defined in enum nfulnl_attr_type (<linux/netfilter/nfnetlink_log.h>)

Are these structures likely to remain unchanged (other than new TLV types being added, and perhaps some TLVs changing 
length in a backwards-compatible fashion), so that older DLT_NFLOG captures won't be rendered unreadable by code that 
reads newer ones, or does this run the risk of changing into a mess like DLT_PFLOG, where the format changes in 
incompatible fashion, so that code that reads newer captures can't read older captures?-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.