[tcpdump-workers] Libpcap timeout settings in tcpdump - too long when printing to a terminal?

2015-01-08 Thread Guy Harris
With TPACKET_V3 support, Linux users are discovering what those of us using BSD-flavored OSes have known for quite a while: http://askubuntu.com/questions/570885/can-tcpdump-on-ubuntu-14-04-show-packets-in-real-time Tcpdump uses a timeout of 1 second when opening a capture device; this

Re: [tcpdump-workers] [libpcap] New DLT value Request - Wattstopper DLM (#401)

2015-01-08 Thread Guy Harris
On Jan 8, 2015, at 3:35 PM, Steve Karg sk...@users.sourceforge.net wrote: The Packet Delay field contains an integer value that is the number of milliseconds since the previous packet. Presumably, in pcap or pcap-ng files with valid packet time stamps, this is redundant. The Preamble 1 and

Re: [tcpdump-workers] [libpcap] New DLT value Request - Wattstopper DLM (#401)

2015-01-08 Thread Guy Harris
On Jan 8, 2015, at 2:21 PM, Denis Ovsienko de...@ovsienko.info wrote: This is intended not to make things difficult for innovation, but to assist the people from future who might be trying to debug relevant code much later. ...and to make it easier to implement dissection for the protocols

Re: [tcpdump-workers] [libpcap] New DLT value Request - Wattstopper DLM (#401)

2015-01-08 Thread Steve Karg
Hi Denis, Steve, if this time you are receiving this as a subscriber to the mailing list, could you describe the encoding in a way similar to one used for http://www.tcpdump.org/linktypes/ ? See below. Best Regards, Steve WattStopper DLM room bus protocol from LMCI USB dongle.

Re: [tcpdump-workers] [libpcap] New DLT value Request - Wattstopper DLM (#401)

2015-01-08 Thread Denis Ovsienko
On Thu, 18 Dec 2014 06:46:10 +0200 Guy Harrisg...@alum.mit.edu wrote On Dec 17, 2014, at 12:04 PM, Steve Karg notificati...@github.com wrote: For a few years I have been using DLT_USER0 147 (user defined) for capturing and saving a serial protocol used by Wattstopper