On Jun 13, 2013, at 8:08 PM, Mike Ryan <miker...@lacklustre.net> wrote:
> I prepend a PPI packet header to the packet, Hopefully, this means that the file's LINKTYPE_ value would be LINKTYPE_BLUETOOTH_LE_LL, not LINKTYPE_PPI. > which includes the DLT (thank you for assigning!) Oh, dear, it sounds as if the file's LINKTYPE_ value would be LINKTYPE_PPI. So what is a program to do if handed a file with a LINKTYPE_ value of LINKTYPE_BLUETOOTH_LE_LL? I *REALLY* don't want to see *ANY* LINKTYPE_/DLT_ values assigned that can *ONLY* be used in a LINKTYPE_PPI file. Could you please switch to a scheme where the state information is a pseudo-header that precedes the payload in the packet data? We could assign a LINKTYPE_BLUETOOTH_LE_LL_UBERTOOTH value for that. _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
