[tcpdump-workers] Request for DLT value

Guy Harris guy at alum.mit.edu
Wed Apr 5 12:26:51 EDT 2017


On Apr 5, 2017, at 4:58 AM, Selvig, Bjorn <b.selvig at ti.com> wrote:

> We would like to support this new header also with pcap format. Our tools currently supports pcap format only.
> 
> Option 1 (single DLT value) sounds a bit simpler. It allows for sniffing of more than one protocol at a time even with pcap format If I understand correctly, for example sniffing of BLE and 802.15.4 packets simultaneously.
> 
> As a first step, is it OK to go for a single DLT for this proposed header?

Anything's OK as long as I don't have to spend any time supporting it.

If somebody else wants to handle this DLT, go ahead.  I won't spend any more time on it, either here or in tcpdump or in Wireshark; life's too short to deal with these "multiple types of link layer" LINKTYPE_/DLT_ values.


More information about the tcpdump-workers mailing list