tcpdump mailing list archives
asking for a new link-layer header type value
From: nicolas roche <nicolasf.roche () gmail com>
Date: Tue, 19 Jul 2011 20:48:49 +0200
Hello, I wondering if the number of packets loosed by the kernel may be added to the .pcap file header. In fact I'm using tcpdump format to capture and replay physical values from a detector and this information is very important to me, so I guess also for other people in the future. Thanks for your tools. Nicolas.
Note: if you need a new encapsulation type for libpcap files (the
value for the network field),
do *NOT* use *ANY* of the existing values! I.e., do *NOT* add a new
encapsulation type by
changing an existing entry; leave the existing entries alone.
Instead, send mail to tcpdump- <mailto:tcpdump-workers () lists tcpdump org>
workers () lists tcpdump org <mailto:tcpdump-workers () lists tcpdump org> ,
asking for a new link-layer > header type value, and specifying
the purpose of the new value.
- This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
Current thread:
- asking for a new link-layer header type value nicolas roche (Jul 20)
- Re: asking for a new link-layer header type value Guy Harris (Jul 20)
- Re: asking for a new link-layer header type value Guy Harris (Jul 20)
- Re: asking for a new link-layer header type value Guy Harris (Jul 20)