Re: [tcpdump-workers] [libpcap] New DLT value Request - Wattstopper DLM (#401)

2015-01-08 Thread Denis Ovsienko
On Thu, 18 Dec 2014 06:46:10 +0200 Guy Harris wrote > > On Dec 17, 2014, at 12:04 PM, Steve Karg wrote: > > > For a few years I have been using DLT_USER0 147 (user defined) for > > capturing and saving a serial protocol used by Wattstopper Digital > > Lighting Management pr

Re: [tcpdump-workers] [libpcap] New DLT value Request - Wattstopper DLM (#401)

2015-01-08 Thread Guy Harris
On Jan 8, 2015, at 2:21 PM, Denis Ovsienko wrote: > This is intended not to make things difficult for innovation, but to assist > the people from future who might be trying to debug relevant code much later. ...and to make it easier to implement dissection for the protocols (i.e., you can rea

Re: [tcpdump-workers] [libpcap] New DLT value Request - Wattstopper DLM (#401)

2015-01-08 Thread Steve Karg
Hi Denis, > Steve, if this time you are receiving this as a subscriber to the mailing > list, could you describe the encoding in a way similar to one used for > http://www.tcpdump.org/linktypes/ ? See below. Best Regards, Steve WattStopper DLM room bus protocol from LMCI USB dongle. +--

Re: [tcpdump-workers] [libpcap] New DLT value Request - Wattstopper DLM (#401)

2015-01-08 Thread Guy Harris
On Jan 8, 2015, at 3:35 PM, Steve Karg wrote: > The Packet Delay field contains an integer value that is the > number of milliseconds since the previous packet. Presumably, in pcap or pcap-ng files with valid packet time stamps, this is redundant. > The Preamble 1 and Preamble 2 fields should

[tcpdump-workers] Libpcap timeout settings in tcpdump - too long when printing to a terminal?

2015-01-08 Thread Guy Harris
With TPACKET_V3 support, Linux users are discovering what those of us using BSD-flavored OSes have known for quite a while: http://askubuntu.com/questions/570885/can-tcpdump-on-ubuntu-14-04-show-packets-in-real-time Tcpdump uses a timeout of 1 second when opening a capture device; this