[pcap-ng-format] Multiple SHBs in a file
Guy Harris
guy at alum.mit.edu
Sat Aug 22 21:42:32 UTC 2015
On Aug 22, 2015, at 4:15 AM, Hadriel Kaplan <the.real.hadriel at gmail.com> wrote:
> On Sat, Aug 22, 2015 at 6:20 AM, Anders Broman
> <anders.broman at ericsson.com> wrote:
>>
>> ---- Vincent Lubet skrev ----
>>
>>> Apple has packet capture tools that create multiple SHB in a singe pcang-ng file and the shipping version of tcpdump for OS X has been able to read for 2 release.
>>
>> You should probably contribute that code to tcpdump.
>
> http://opensource.apple.com/source/tcpdump/tcpdump-61/tcpdump/
Apple should probably contribute that code to tcpdump and libpcap *under a license without packet clauses*; I suspect that some OS suppliers might not want code with patent clauses of that sort.
More information about the pcap-ng-format
mailing list