On Thu, Oct 10, 2002 at 03:28:26PM -0700, Chris Waters wrote: > I have attached a dissector and a patch to wiretap for a new protocol. The > Tazmen Sniffer Protocol is a proprietary protocol for encapsulating packets > captured by remote packet sniffers.
Is it a *protocol* or a *file format*? I.e., it sets itself up as a link-layer protocol, but what physical networks implement it? It appears to be a file format piggybacked atop libpcap format; perhaps it'd be cleaner to define it as a new file format by itself, without layering it atop Ethereal. > I have arbitrarily assigned a pcap encapsulation number so that raw TZSP > packets can be saved in libpcap files. As Gilbert noted, you shouldn't do that - encapsulation number 124 is already reserved.
