<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
I could live without the IP addresses of the capture interface, but
apparently someone thought it would be nice to have :-) I usually
capture with passive NICs anyway, but for those cases where you do a
local capture it could be helpful to identify that the system is
setup like that. If you see traffic to and from an IP which is the
same as the one of the capture interface you have a local capture
setup.<br>
<br>
I think a traffic generator should not write the interface IPs to a
capture if there are that many addresses used in a test. Last time I
checked even dumpcap doesn't write the IP of the capture interface
to file.<br>
<br>
Cheers,<br>
Jasper<br>
<br>
On 24.07.2012 16:28, Anders Broman wrote:<br>
<span style="white-space: pre;">> Hi,<br>
> One comment after a quick read trough<br>
> if_IPv4addr multiple<br>
> if_IPv6addr multiple<br>
><br>
> Is the IP address(es) of the capturing interface of any
interest?<br>
> If the capture is of a span/mirror port or of a tap I guess
not, we have an SIP user traffic<br>
> Generator which have > 13 0000 virtual IP addresses
assigned to a interface that'd mess up<br>
> Any representation of IP addresses badly I think.<br>
><br>
> Regards<br>
> Anders <br>
><br>
> -----Original Message-----<br>
> From: <a class="moz-txt-link-abbreviated" href="mailto:pcap-ng-format-bounces@winpcap.org">pcap-ng-format-bounces@winpcap.org</a>
[<a class="moz-txt-link-freetext" href="mailto:pcap-ng-format-bounces@winpcap.org">mailto:pcap-ng-format-bounces@winpcap.org</a>] On Behalf Of Jasper
Bongertz<br>
> Sent: den 24 juli 2012 15:50<br>
> To: Pcap-ng file format<br>
> Subject: [pcap-ng-format] TODO in pcap-ng specifications<br>
><br>
> Hi all,<br>
><br>
> I've just spent a little time in the specs and searched for
all TODOs to see what can be done about them. I have created a
text document with my thoughts, and maybe some of you can take a
look at it and we can start a discussion about it to get things
going.<br>
><br>
> If nobody disagrees I will replace the simple TODO items (for
the examples mostly) in the SVN sometime end of this week.<br>
><br>
> Cheers,<br>
> Jasper<br>
> _______________________________________________<br>
> pcap-ng-format mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:pcap-ng-format@winpcap.org">pcap-ng-format@winpcap.org</a><br>
> <a class="moz-txt-link-freetext" href="https://www.winpcap.org/mailman/listinfo/pcap-ng-format">https://www.winpcap.org/mailman/listinfo/pcap-ng-format</a></span><br>
<br>
<br>
</body>
</html>