Re: [tcpdump-workers] using tcpdump

2013-05-18 Thread Mahmood Naderan
Problem is, syslog (and kernel in general) doesn't record such things *at all*   Regards, Mahmood From: Mark W. Jeanmougin To: Mahmood Naderan Cc: "tcpdump-workers@lists.tcpdump.org" Sent: Sunday, May 19, 2013 1:09 AM Subject: Re: [tcpdump-workers] using t

Re: [tcpdump-workers] capturing only timestamp excluding other information

2013-05-18 Thread Guy Harris
On May 8, 2013, at 10:51 PM, achyut baruah wrote: > Sir, I have been using Tcpdump. Extracting timestamp from a pcap file is > quite easy. Is there any way to capture only the timestamp excluding other > info using Tcpdump while capturing packet. No, there isn't. However, if you capture with a

Re: [tcpdump-workers] Request for new DLT

2013-05-18 Thread Michael Richardson
> "Pascal" == Pascal Quantin writes: Pascal> Anders Broman, Wireshark core developer, is currently designing an export Pascal> functionality for PDUs and would need a DLT allocated for this new Pascal> functionality. Pascal> You will find below the email he tried to send to t

Re: [tcpdump-workers] Request for new DLT

2013-05-18 Thread Anders Broman
Hi, I would need a DLT for a wrapper around higher level PDU's or per-packet DLT:s the format is multipurpose and consists of a number of TLV:s proceeding the actual PDU. There are TLV:s which describes which protocol the PDU is and meta data such as IP address and port (if the transport protoc

[tcpdump-workers] Request for new DLT

2013-05-18 Thread Anders Broman
Hi, I would need a DLT for a wrapper around higher level PDU's or per-packet DLT:s the format is multipurpose and consists of a number of TLV:s proceeding the actual PDU. There are TLV:s which describes which protocol the PDU is and meta data such as IP address and port (if the transport protoco

[tcpdump-workers] Request for DLT

2013-05-18 Thread Anders Broman
Hi, I would need a DLT for a wrapper around higher level PDU's or per-packet DLT:s the format is multipurpose and consists of a number of TLV:s proceeding the actual PDU. There are TLV:s which describes which protocol the PDU is and meta data such as IP address and port (if the transport protoco

[tcpdump-workers] Request for new pcap/pcapng DLT Format

2013-05-18 Thread chris_bontje
Hi, I would like to request a custom DLT type for the Schweitzer Engineering Laboratories "RTAC" product. Information on the product/purpose of the DLT is included below: The RTAC product family (SEL-3530, SEL-2241, SEL-3505) is a Linux-based Automation Controller product that is capable of in

[tcpdump-workers] capturing only timestamp excluding other information

2013-05-18 Thread achyut baruah
Sir, I have been using Tcpdump. Extracting timestamp from a pcap file is quite easy. Is there any way to capture only the timestamp excluding other info using Tcpdump while capturing packet. -- Achyut Baruah M.Tech(IT) Dept. of Computer Sc. & Engg. Tezpur University, India. ___

[tcpdump-workers] pcap FCS length and LT_FCS_DATALINK_EXT()

2013-05-18 Thread Stephen Donnelly
Hi Guy, In 2007 in libpcap afbb1ce7 you committed some code (possibly from Florent Drouin) adding the LT_FCS_DATALINK_EXT mechanism to record whether the capture includes information about captured FCS length, and if so what length it is. I believe that currently only the DAG capture code suppo

[tcpdump-workers] Request for new DLT

2013-05-18 Thread Pascal Quantin
Hi all, Anders Broman, Wireshark core developer, is currently designing an export functionality for PDUs and would need a DLT allocated for this new functionality. You will find below the email he tried to send to this mailing list a few days ago and that got bounced. I hope mine will go through :

Re: [tcpdump-workers] using tcpdump

2013-05-18 Thread Mahmood Naderan
>I would suspect that you have a duplicate IP address on your internet side   In case of ip conflict, is there any special message/packet which can be extracted from tcpdump? Regards, Mahmood From: Michael Richardson To: Mahmood Naderan Cc: "tcpdump-worke