It would seem to me that the best approach would be to have a format configuration file when an entry for each dissected protocol. Local installations could tweak it however they like.
That would be great -- but the default should be the old format.
Eddie
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.