[tcpdump-workers] Request for DLT value
guy at alum.mit.edu
Wed Apr 5 12:26:51 EDT 2017
On Apr 5, 2017, at 4:58 AM, Selvig, Bjorn <b.selvig at ti.com> wrote:
> We would like to support this new header also with pcap format. Our tools currently supports pcap format only.
> Option 1 (single DLT value) sounds a bit simpler. It allows for sniffing of more than one protocol at a time even with pcap format If I understand correctly, for example sniffing of BLE and 802.15.4 packets simultaneously.
> As a first step, is it OK to go for a single DLT for this proposed header?
Anything's OK as long as I don't have to spend any time supporting it.
If somebody else wants to handle this DLT, go ahead. I won't spend any more time on it, either here or in tcpdump or in Wireshark; life's too short to deal with these "multiple types of link layer" LINKTYPE_/DLT_ values.
More information about the tcpdump-workers