Re: [tcpdump-workers] Request for DLT for Linux Kernel Messages

2013-12-30 Thread Michal Labedzki
On 30 December 2013 00:20, Guy Harris wrote: > ...and the packet format is just a line containing text, so that the packet > data is just N bytes of text (presumably without an NL at the end), with a > bunch of comma-separated fields giving priority/sequence number/time > stamp/text? Where are

Re: [tcpdump-workers] Request for DLT for Linux Kernel Messages

2013-12-29 Thread Guy Harris
On Dec 20, 2013, at 3:38 AM, Michal Labedzki wrote: > Linux kernel message have packet structure (one log/event = one packet) ...and the packet format is just a line containing text, so that the packet data is just N bytes of text (presumably without an NL at the end), with a bunch of comma-s

[tcpdump-workers] Request for DLT for Linux Kernel Messages

2013-12-20 Thread Michal Labedzki
Hello, I would like to ask about possibility to add DLT value for Linux Kernel Messages. Is it possible or not? I previously show ready libpcap implementation [1], also I have ready implementation for Wiredshark. (in short: on Linux Kernel >3.4 it is able to dump via /dev/kmsg, also inject). Linu