Re: [tcpdump-workers] endianness of portable BPF bytecode

2022-06-10 Thread Denis Ovsienko via tcpdump-workers
--- Begin Message --- On Fri, 10 Jun 2022 14:26:34 -0700 Guy Harris wrote: > On Jun 10, 2022, at 1:59 PM, Denis Ovsienko via tcpdump-workers > wrote: > > > Below is a draft of such a file format. It addresses the following > > needs: > > * There is a header with a signature string to avoid

Re: [tcpdump-workers] endianness of portable BPF bytecode

2022-06-10 Thread Guy Harris via tcpdump-workers
--- Begin Message --- On Jun 10, 2022, at 1:59 PM, Denis Ovsienko via tcpdump-workers wrote: > Below is a draft of such a file format. It addresses the following > needs: > * There is a header with a signature string to avoid false positive > detection as some other file type that begins

Re: [tcpdump-workers] endianness of portable BPF bytecode

2022-06-10 Thread Denis Ovsienko via tcpdump-workers
--- Begin Message --- On Thu, 2 Jun 2022 20:58:38 +0100 Denis Ovsienko via tcpdump-workers wrote: > If there is no convention in place yet, I would like to propose > declaring big-endian as the implicit/default byte order, then > particular file format(s) with headers can override that as