Guy Harris wrote:
> Oops, OS X tcpdump has -k:
>-k Print the comment field from the libpcap packet header. Apple
> modification.
> so it's getopt_long() time. (I think "comment field from the libpcap
> packet header" means "comment option from the pcap-ng packet block".
On May 3, 2014, at 11:55 AM, Michael Richardson wrote:
> Yes. My notion was to rid tcpdump.c of all code not related to option
> parsing, and then introduce a pktdump.c interface that that could start
> fresh in the short-option parsing space. Could toggle on $0/argv[0].
Unless pktdump goes
Guy Harris wrote:
>> Yes. My notion was to rid tcpdump.c of all code not related to option
>> parsing, and then introduce a pktdump.c interface that that could
>> start fresh in the short-option parsing space. Could toggle on
>> $0/argv[0].
> Unless pktdump goes down the Wi
