Re: [tcpdump-workers] Link-Layer Header Type request for USBPcap

2013-03-27 Thread Guy Harris
OK, 249 assigned for LINKTYPE_USBPCAP/DLT_USBPCAP. You might want to update your description to clarify the points I mentioned - not everybody writing or maintaining code to process this will necessarily be familiar with #pragma pack(), Windows NT IRPs, etc.

[tcpdump-workers] Link-Layer Header Type request for USBPcap

2013-03-25 Thread Tomasz Moń
Hello, For the USBPcap project I would like to request a new link-layer header type value: LINKTYPE_USBPCAP DLT_USBPCAP Capture format specification is available at the project website [1] and could be described as pseudo-header for USB packets captured using USBPcap on Microsoft Windows.

Re: [tcpdump-workers] Link-Layer Header Type request for USBPcap

2013-03-25 Thread Guy Harris
On Mar 25, 2013, at 2:48 AM, Tomasz Moń deso...@gmail.com wrote: For the USBPcap project I would like to request a new link-layer header type value: LINKTYPE_USBPCAP DLT_USBPCAP Capture format specification is available at the project website [1] and could be described as pseudo-header

Re: [tcpdump-workers] Link-Layer Header Type request for USBPcap

2013-03-25 Thread Tomasz Moń
On Mon, Mar 25, 2013 at 11:08 AM, Guy Harris g...@alum.mit.edu wrote: #pragma pack(1) typedef struct { USHORT headerLen; /* This header length */ UINT64 irpId; /* I/O Request packet ID */ So headerLen is at an offset of 0, and irpId is at an offset of 2, right?