Re: [tcpdump-workers] DLT for Bluetooth Low Energy
On Jun 13, 2013, at 8:08 PM, Mike Ryan wrote: > I prepend a PPI packet header to the packet, Hopefully, this means that the file's LINKTYPE_ value would be LINKTYPE_BLUETOOTH_LE_LL, not LINKTYPE_PPI. > which includes the DLT (thank you for assigning!) Oh, dear, it sounds as if the file's LINKTYPE_ value would be LINKTYPE_PPI. So what is a program to do if handed a file with a LINKTYPE_ value of LINKTYPE_BLUETOOTH_LE_LL? I *REALLY* don't want to see *ANY* LINKTYPE_/DLT_ values assigned that can *ONLY* be used in a LINKTYPE_PPI file. Could you please switch to a scheme where the state information is a pseudo-header that precedes the payload in the packet data? We could assign a LINKTYPE_BLUETOOTH_LE_LL_UBERTOOTH value for that. ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
Re: [tcpdump-workers] DLT for Bluetooth Low Energy
> Could you please switch to a scheme where the state information is a > pseudo-header that precedes the payload in the packet data? We could > assign a LINKTYPE_BLUETOOTH_LE_LL_UBERTOOTH value for that. Certainly. Can you point to any protocols which already implement things this way? I find it's easiest to base stuff on existing examples. ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
Re: [tcpdump-workers] DLT for Bluetooth Low Energy
On Jun 14, 2013, at 9:33 AM, Mike Ryan wrote: >> Could you please switch to a scheme where the state information is a >> pseudo-header that precedes the payload in the packet data? We could >> assign a LINKTYPE_BLUETOOTH_LE_LL_UBERTOOTH value for that. > > Certainly. Can you point to any protocols which already implement things > this way? I find it's easiest to base stuff on existing examples. 802.11; see, for example, LINKTYPE_IEEE802_11_RADIOTAP/DLT_IEEE802_11_RADIO, where the packet data is preceded by a radiotap header: http://www.radiotap.org/ ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
