Re: [tcpdump-workers] Question about savefile format

2008-04-03 Thread Guy Harris
Milosz Marian Hulboj wrote: What I meant was to store the captured packets in the blocks of fixed size (possibly wasting some of the storage space in case of small packets, but gaining in case one wishes to do random access). So to access packet $n$ I would have to look at the offset = header

Re: [tcpdump-workers] Question about savefile format

2008-04-03 Thread Milosz Marian Hulboj
On Wednesday 02 April 2008, Guy Harris wrote: > What "fixed length blocks" are you referring to? The current file > format has > > 1) a file header, which you can't use to store packets; > > 2) variable-length blocks containing packets. Hello, What I meant was to store the captu

Re: [tcpdump-workers] Question about savefile format

2008-04-02 Thread Guy Harris
On Apr 1, 2008, at 2:03 AM, Milosz Marian Hulboj wrote: I would like to know whether it is possible with the current pcap format to store the captured packets in the fixed length blocks in the file. What "fixed length blocks" are you referring to? The current file format has 1)

[tcpdump-workers] Question about savefile format

2008-04-01 Thread Milosz Marian Hulboj
Hello, I would like to know whether it is possible with the current pcap format to store the captured packets in the fixed length blocks in the file. I have briefly looked at the format that is being used to store the pcap files and I think that currently it is not possible, but I would like to