Re: Request for new pcap/pcapng DLT Format

[Guy Harris <guy () alum mit edu>]

On May 13, 2013, at 1:04 PM, chris_bontje () selinc com wrote:

> Hi, I would like to request a custom DLT type for the Schweitzer 
> Engineering Laboratories "RTAC" product.  Information on the 
> product/purpose of the DLT is included below:

Do LINKTYPE_RTAC_SERIAL/DLT_RTAC_SERIAL sound like good names?

> All Ethernet-based capture files will have a packets with a "Linux Cooked 
> Capture" Ethernet-header

That's not an Ethernet header:

        http://www.tcpdump.org/linktypes/LINKTYPE_LINUX_SLL.html

Any particular reason not to use LINKTYPE_ETHERNET/DLT_EN10MB, rather than LINKTYPE_LINUX_SLL/DLT_LINUX_SLL, for 
Ethernet captures?
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers