[ntar-workers] Re: [Ethereal-dev] Re: NTAR - PCAP next generation
dump file formatimplementation
mcr at sandelman.ottawa.on.ca
Mon Jun 27 02:36:09 GMT 2005
-----BEGIN PGP SIGNED MESSAGE-----
>>>>> "Gianluca" == Gianluca Varenni <gianluca.varenni at gmail.com> writes:
Gianluca> In my opinion the marker should contain the following informations
Gianluca> - number of packets up to the next "marker block"
Gianluca> - number of bytes up to the next "marker block"
Gianluca> - timestamp of the first and last packet up to the next "marker block"
Gianluca> - offset to the next "marker block"
Gianluca> - other??
Can any of these things be written without seeking backwards in the
file? Can we make sure that the value 0, or some other nonsense value
can be inserted to mean, "I didn't calculate that", and let a
post-processor worry about fixing the actual values in.
] Michael Richardson Xelerance Corporation, Ottawa, ON | firewalls [
] mcr @ xelerance.com Now doing IPsec training, see |net architect[
] http://www.sandelman.ca/mcr/ www.xelerance.com/training/ |device driver[
] I'm a dad: http://www.sandelman.ca/lrmr/ [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys
-----END PGP SIGNATURE-----
More information about the ntar-workers