On Sat, Apr 10, 2004 at 04:39:41AM +1000, Darren Reed wrote: > I'll agree that this, as part of the per-packet header, would be a useful > addition to the pcap format. No need for chained hashing, just per-record.
Part of the packet block header, or an option in the packet block? I'd vote for the latter. - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.