Wireshark mailing list archives

Re: Filebacked-tvbuffs : GSoC'13


From: Guy Harris <guy () alum mit edu>
Date: Sun, 12 May 2013 23:10:53 -0700


On May 12, 2013, at 10:57 PM, Anders Broman <a.broman () bredband net> wrote:

So either this is a bad idea, don't pursue it or everything we can read we should be able to write in pcap-ng
as a temporary file at least.

...or if we're going to store the contents of packet *not* just generated by gluing together stuff from the capture 
file (e.g., stuff generated by decompressing packet data or decrypting packet data), we should store it in a temporary 
file with a format that we control, rather than a capture file format.  (Yes, that means that the results of that won't 
be *saved*, but there's no obligation for us to *avoid* regenerating decompressed/decrypted/etc. packet data.)

I.e., having a capture file format that saves *arbitrary higher level packets* so that we can just read those packets 
is *NOT* a required goal of this project.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: