[ntar-workers] Re: [Ethereal-dev] Re: NTAR - PCAP next generation
dump file formatimplementation
Michael Richardson
mcr at sandelman.ottawa.on.ca
Mon Jun 27 02:36:09 GMT 2005
-----BEGIN PGP SIGNED MESSAGE-----
>>>>> "Gianluca" == Gianluca Varenni <gianluca.varenni at gmail.com> writes:
Gianluca> In my opinion the marker should contain the following informations
Gianluca> - number of packets up to the next "marker block"
Gianluca> - number of bytes up to the next "marker block"
Gianluca> - timestamp of the first and last packet up to the next "marker block"
Gianluca> - offset to the next "marker block"
Gianluca> - other??
Can any of these things be written without seeking backwards in the
file? Can we make sure that the value 0, or some other nonsense value
can be inserted to mean, "I didn't calculate that", and let a
post-processor worry about fixing the actual values in.
- --
] Michael Richardson Xelerance Corporation, Ottawa, ON | firewalls [
] mcr @ xelerance.com Now doing IPsec training, see |net architect[
] http://www.sandelman.ca/mcr/ www.xelerance.com/training/ |device driver[
] I'm a dad: http://www.sandelman.ca/lrmr/ [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys
iQCVAwUBQr9mF4qHRg3pndX9AQFV4QQA1bLwRWvpq5MfRt0Tucppcc4w5iDZDL1f
amC/yf5PDyDqVV/0jHld4Xl9j2yeUyTSN+tfZzj2GeAdLMHh7LIpHI+3R9pZfwCv
nXm3muzNMdiDfCwVZZjyJH+/jCGsAohDZ2zMrsI2vcNUz7JU8jS4jhDSQRKQeVhl
M0YBD5KJK+M=
=2NZR
-----END PGP SIGNATURE-----
More information about the ntar-workers
mailing list