-----BEGIN PGP SIGNED MESSAGE-----
>>>>> "Ben" == Ben Low <[EMAIL PROTECTED]> writes:
Ben> If I work up a patch or two, what are the chances that they'd be merged
Ben> into an official release (0.7?) ?
I think that it would be welcome. Make sure to include patches to
configure.in as well.
Ben> I believe I could implement the changes in a backwards compatible,
Ben> transparent fashion, using the filename to automatically switch on zlib
Ben> (i.e. if fname ends in ".gz", use zlib i/o). (Indeed, for reading, it
Ben> seems zlib will automatically read uncompressed data.)
I recommend that you make it either an option (-Z) or that you use -W or
some such to force gzip'ed output. Also, the next person will want bzip2'ed
output/input. If possible it would be nice for input to be able to deal with
multiple formats.
Ben> Q's:
Ben> 1. is having the save file FILE pointer opaque intentional?
Yes. It could be a structure with more stuff in it, and often is when the
input is not a file.
Ben> 2. Is there any neat way of inserting timestamps into pcap files? (I want to
Ben> record the start and end of trace times, which aren't neccessarily the
Ben> times of the first/last packets).
Ben> - I've found that writing empty (header only, zero payload) pcap records to
Ben> the file crashes tcpdump (at least 3.4a6). Writing a one-byte payload
Ben> doesn't crash tcpdump, but is there anything else I should be aware of?
Ben> - is there a cleaner way?
I don't know. There are messages in the archives about redoing the format
to include more meta data fields.
] ON HUMILITY: to err is human. To moo, bovine. | firewalls [
] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[
] [EMAIL PROTECTED] http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
Comment: Finger me for keys
iQCVAwUBPDSLJ4qHRg3pndX9AQFhwQP/QBvz3dQO4K23Hxox8izdZscA6EfFrupW
BRtPoKcfvNAazbjFpw6I9dShq5KwkRCH3kZocEQIeArlXvgbMYjSKRFO88cQtOEZ
DB+ffeEOFHAk1bgvpgONOT/IFOvNAs6jLkY3065hH0d+TLTWM8NA+PMiWRr5cGGa
7cfRQeWn1YY=
=FZHi
-----END PGP SIGNATURE-----
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
