Gilbert Ramirez wrote: > Phil Wood wrote: > >> >>Gilbert Ramirez <[EMAIL PROTECTED]> is suggesting DNS records to >>accompany the data in a new tcpdump file format. If this becomes a reality, >>PLEASE make it an optional feature (alternate reality). There is nothing >> > > Yes, they would be optional. > > >>quite so BAD as doing DNS address to name lookups while capturing packets. >> > > That's true. I never intended for the lookups to be done concurrently. > Remember, I'm describing the file format, not the tool implementation. > And many different tools use the libpcap file format, not just tcpdump. > I envision a capture taking place, and *if you want*, a tool processing > the > packets and storing the name-to-address mappings in the/a file.
Please consider also a variable length comment field, possibly at the end of each record. Actually, in some cases, it would be nice to see attribute-value pairs in there as well, but that is possibly going too far :-) -- Richard Sharpe, [EMAIL PROTECTED], LPIC-1 www.samba.org, www.ethereal.com, SAMS Teach Yourself Samba in 24 Hours, Special Edition, Using Samba - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
