[pcap-ng-format] Multiple SHBs in a file

Guy Harris guy at alum.mit.edu
Sat Aug 22 21:42:32 UTC 2015


On Aug 22, 2015, at 4:15 AM, Hadriel Kaplan <the.real.hadriel at gmail.com> wrote:

> On Sat, Aug 22, 2015 at 6:20 AM, Anders Broman
> <anders.broman at ericsson.com> wrote:
>> 
>> ---- Vincent Lubet skrev ----
>> 
>>> Apple has packet capture tools that create multiple SHB in a singe pcang-ng file and the shipping version of tcpdump for OS X has been able to read for 2 release.
>> 
>> You should probably contribute that code to tcpdump.
> 
> http://opensource.apple.com/source/tcpdump/tcpdump-61/tcpdump/

Apple should probably contribute that code to tcpdump and libpcap *under a license without packet clauses*; I suspect that some OS suppliers might not want code with patent clauses of that sort.


More information about the pcap-ng-format mailing list