--- Begin Message ---
developer--- via tcpdump-workers <tcpdump-workers@lists.tcpdump.org> wrote:
> We would like to request a dedicated LINKTYPE_* / DLT_* code.
> Auerswald is a major German telecommunications equipment manufacturer.
> We have implemented the option to capture (combined) network traffic
> and logging information as pcap/pcapng in our soon to be released new
> product line.
> For development, we so far have used LINKTYPE_USER0 and would like to
> change this to a proper code before the commercial release.
> We also plan to publicly release the dissector and would like to make
> sure both can be released with a proper code from the get go. The
> dissector we currently use is however only in lua.
> Our preferred name would be LINKTYPE_AUERSWALD_LOG
That sounds great.
Ideally, you would have a document somewhere that would describe your capture
format. We might want to review the format.
I would note that if you are just adding logging, and you just want to use
pcapng, that you might store your ethernet captures as normal EN10B, and your
logging in a new LINKTYPE_, which was specific to your log format.
In pcapng, you can mix different LINKTYPEs, in a single file.
(But, not in pcap, which is/was a major reason pcapng was designed)
Then you can ideally follow:
https://github.com/the-tcpdump-group/libpcap/blob/master/doc/DLT_ALLOCATE_HOWTO.md
send a pull request.
> If anyone is interested we can provide further information.
> Best regards
> Frank Gorgas-Waller Software Architect
> Auerswald Gesellschaft für Datensysteme mbH Vor den Grashöfen 1 38162
> Cremlingen Germany
--
] Never tell me the odds! | ipv6 mesh networks [
] Michael Richardson, Sandelman Software Works | IoT architect [
] m...@sandelman.ca http://www.sandelman.ca/ | ruby on rails [
--- End Message ---
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers