Saku Ytti writes: > python version makes more sense, if you're starting > your debug session now. ruby version makes more > sense if you already are in possession of pcap > capture of ERSPAN and want to have something > useful to look at in eg. wireshark.
Note that the brand-new Wireshark 0.99.6 claims to have ERSPAN decoding support built in: http://www.wireshark.org/lists/wireshark-announce/200707/msg00000.html -- Simon. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
