Wireshark · Wireshark-dev: Re: [Wireshark-dev] [ntar-workers] Extending Wireshark libpcap format support, or start using pcapng

Wireshark-dev: Re: [Wireshark-dev] [ntar-workers] Extending Wireshark libpcap format support, o

From: Gerald Combs <gerald@xxxxxxxxxxxxx>

Date: Thu, 27 Sep 2007 11:23:36 -0700

Pekka Pietikainen wrote:
> Oh. If you add a new DLT_ value, having it in a way that is extensible
> + has a way of saying "Here's the raw packet data. It's plain old
> DLT_EN10MB". And the next one might be 802.11 and the next one 802.11 with 
> a radiotap header. 

The Per-Packet Information header (PPI) does exactly that:
http://www.cacetech.com/documents/.

Follow-Ups:
- Re: [Wireshark-dev] [ntar-workers] Extending Wireshark libpcap format support, or start using pcapng now ?!?
  - From: Ulf Lamping

References:
- [Wireshark-dev] Extending Wireshark libpcap format support, or start using pcapng now ?!?
  - From: Ulf Lamping
- Re: [Wireshark-dev] [ntar-workers] Extending Wireshark libpcap format support, or start using pcapng now ?!?
  - From: Pekka Pietikainen

Prev by Date: Re: [Wireshark-dev] Win32 buildbot is repeatingly running into a "Permission denied" exception ...
Next by Date: Re: [Wireshark-dev] [PATCH] iSeries wiretap update
Previous by thread: Re: [Wireshark-dev] [ntar-workers] Extending Wireshark libpcap format support, or start using pcapng now ?!?
Next by thread: Re: [Wireshark-dev] [ntar-workers] Extending Wireshark libpcap format support, or start using pcapng now ?!?
Index(es):
- Date
- Thread