[tcpdump-workers] tcpdump 4.0.0rc1 and libpcap 1.0.0rc1 available

2008-04-03 Thread Ken Bantoft
Hi, I've put up the current libpcap_1 and tcpdump_4 CVS tree into packages at http://www.tcpdump.org/beta I need to write up the CHANGES for each, but I'll get that up for rc2, which will be next Thursday. Ken - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsub

Re: [tcpdump-workers] Question about savefile format

2008-04-03 Thread Guy Harris
Milosz Marian Hulboj wrote: What I meant was to store the captured packets in the blocks of fixed size (possibly wasting some of the storage space in case of small packets, but gaining in case one wishes to do random access). So to access packet $n$ I would have to look at the offset = header

Re: [tcpdump-workers] [Patch] tcpdump probabilistic sampling

2008-04-03 Thread Milosz Marian Hulboj
On Wednesday 02 April 2008, Jesse Kempf wrote: > I meant to say, "What does deterministic sampling give you that > random sampling does not?" Hello, Deterministic sampling is trivial to implement (but it was rather an issue in the hardware, in the past). It is vulnerable to bias if the metric

Re: [tcpdump-workers] Question about savefile format

2008-04-03 Thread Milosz Marian Hulboj
On Wednesday 02 April 2008, Guy Harris wrote: > What "fixed length blocks" are you referring to? The current file > format has > > 1) a file header, which you can't use to store packets; > > 2) variable-length blocks containing packets. Hello, What I meant was to store the captu